Claude Dispatch Flaw: Can Your Browser Tab Drive the Agent on Your Desktop?
Yes, according to new reporting. A Dataconomy story on research from Gal Weizman of Forever Security describes a flaw in Anthropic's Claude Dispatch, which he calls ThisBash: while you are signed in to Claude.ai and Claude Desktop with Dispatch on, a malicious browser extension can talk to that desktop session like you, and it can even reach a different computer on the same account (Dataconomy, Nov. 6, 2026, The Register, Nov. 5, 2026).
The good news: a few account habits can cut that path.
You can watch the short version here: Watch the Short on YouTube
The video uses a digital avatar of Erick Grau, CEO of Chibitek.
Why Does This Matter?
Claude Dispatch lets you send tasks from a browser or phone to Claude Desktop, which can run commands on that computer (Dataconomy; Anthropic's Help Center). That is handy when you want the agent on your desk to work with local files while you are on your phone. It also means that session is no longer only in front of you.
Think of Dispatch like a walkie-talkie between your browser and the computer on your desk. If an add-on in your browser can pick up that walkie-talkie, it can talk to the computer like you. I walk through the report and the three habits in this Short: Watch the Short on YouTube
How Can a Browser Extension Drive Claude Desktop?
Weizman says the path needs you signed in to both Claude.ai and Claude Desktop, with Dispatch enabled. An extension that can reach your logged-in Claude.ai session can then send commands to Claude Desktop as though they came from you (Dataconomy).
In his demonstration, the extension pushed Claude to install a bad npm package that ran code on the machine. The demo used a preinstall hook (a script that runs during install) to open the calculator app, a simple way to show that code had run. He also says the extension can click Approve if you step away, and that someone could take over a trusted add-on instead of writing a new one (Dataconomy, The Register).
Treat any desktop agent that can run commands like privileged access. If you walk away, assume something else can press the button.
Can a Personal Account Reach a Work Laptop?
Yes, if both machines use the same Claude account. Dispatch can connect a browser session to Claude Desktop on another computer, so a personal account on a home machine can become a bridge onto a work laptop (Dataconomy, The Register). Forever Security told Dataconomy it found personal Claude accounts in corporate environments at six organizations (Dataconomy). Do not sign a personal Claude account into a work machine, and do not share one account across home and office.
Has This Been Patched?
Not according to the reporting. Weizman says Anthropic validated the issue in May 2026, closed the report as a duplicate, and did not issue a CVE (a public vulnerability ID) or pay a bug bounty. The Register wrote that Anthropic did not respond to its questions (Dataconomy, The Register).
Dispatch was supposed to retire by the end of October 2026, but Weizman said some Pro, Max, and Ultra users still had it in limited beta as of October 30 (Dataconomy). Anthropic's Help Center still described it that way when we checked on Nov. 10, 2026: a limited beta on some of those plans, closed to new users, with existing users able to keep using it for now (Claude Help Center). We have not independently tested whether it still runs for every existing user.
What Should You Do Right Now?
Keep personal and work accounts apart. Do not sign a personal Claude account into a work machine, and do not share one account across home and office.
Treat any desktop agent that can run commands like privileged access. If you step away, assume something else can click Approve.
Map the reach. If your team uses Claude Desktop or Cowork, ask which accounts are personal, which are corporate, and which machines they can reach.
These are the same three habits in the Short.
Key Points of Claude Dispatch and ThisBash
ThisBash is the name Gal Weizman gave to a reported flaw in Claude Dispatch.
A malicious browser extension, while you are signed in with Dispatch on, can talk to Claude Desktop like you.
The same Claude account can link a browser session to Desktop on another computer, including a work laptop.
Weizman says Anthropic validated the issue in May 2026 and left it unpatched, treating it as a duplicate.
Anthropic's Help Center still described Dispatch as a limited beta for some existing Pro, Max, and Ultra users as of Nov. 10, 2026.
Keep personal Claude off work machines, treat desktop agents as privileged access, and map which accounts can reach which machines.
Frequently Asked Questions
What is Claude Dispatch?
A Claude feature that lets you send tasks from a browser or phone to Claude Desktop, which can run commands on that computer (Claude Help Center).
What is ThisBash?
The name Weizman gave to this reported flaw, in which a malicious or hijacked browser extension can drive Claude Desktop through Dispatch (Dataconomy).
Do I have to have Dispatch turned on?
The demonstration required Claude.ai, Claude Desktop, and Dispatch enabled (Dataconomy). Weizman also says Claude Cowork and Claude Code Remote Control may share sessions in a similar way (The Register). That wider claim is his. We have not verified a separate demo.
Has Anthropic issued a fix or a public vulnerability ID?
Not according to Weizman, as reported by Dataconomy and The Register. We have not found a public statement from Anthropic on this report.
Was this used in real-world attacks?
The write-ups we used describe a researcher demonstration (the calculator demo). They do not document confirmed attacks in the wild, and they also do not prove that none have happened.
Let's Keep Personal Logins Off Work Laptops
At Chibitek, we help businesses use desktop AI agents with clear account rules and no geek-speak. Don't let a personal login become a bridge onto a work laptop. Contact us at hello@chibitek.com to learn how we can help you map which AI accounts can reach which machines, and set guardrails your team will actually use.
Further reading: the Dataconomy report and The Register's exclusive.
You can watch the short version here: Watch the Short on YouTube
We make IT effortless so you can create, disrupt, and grow!
Follow Chibitek on YouTube at @chibitekmsp, and follow Chibitek on LinkedIn.
Comments