103
Claude Desktop Extensions 0-Click RCE Vulnerability Exposes 10,000+ Users to Remote Attacks
(cybersecuritynews.com)
this post was submitted on 13 Feb 2026
103 points (100.0% liked)
Technology
81087 readers
4134 users here now
This is a most excellent place for technology news and articles.
Our Rules
- Follow the lemmy.world rules.
- Only tech related news or articles.
- Be excellent to each other!
- Mod approved content bots can post up to 10 articles per day.
- Threads asking for personal tech support may be deleted.
- Politics threads may be removed.
- No memes allowed as posts, OK to post as comments.
- Only approved bots from the list below, this includes using AI responses and summaries. To ask if your bot can be added please contact a mod.
- Check for duplicates before posting, duplicates may be removed
- Accounts 7 days and younger will have their posts automatically removed.
Approved Bots
founded 2 years ago
MODERATORS
you are viewing a single comment's thread
view the rest of the comments
view the rest of the comments
According to the article, the lack of sandboxing is intentional on Anthropic's part. Anthropic also fails to realistically communicate how to use their product.
This is Anthropic's fault.
Oh, for sure, the marketing is terrible and makes this into a bigger issue by making people over confident. I wouldn't say the lack of sandboxing is a major problem on its own, though. If you want an automated agent that does everything, it's going to need permissions to do everything. Though they should absolutely have configurable guardrails that are restrictive by default. I doubt they bothered with that.
The idea is sound, but the tech isn't there yet. The real problem is that the marketing pretends that LLMs are ready for this. Maybe Anthropic shouldn't have released it at all, but at this point AI companies subsist on releasing half-baked products with thrice-baked promises so at this point I wouldn't be surprised if OpenAI, in an attempt to remain relevant, tomorrow releases an automated identity theft bot to help you file your taxes incorrectly.