Critical Zero-Click Flaw Found in Claude Desktop Extensions (infosecurity-magazine.com)

• Zero-click RCE identified in 50 desktop extensions
• Anthropic refuses to implement security patches
• Major implications for enterprise AI security protocols

"Security researchers from LayerX have identified a significant zero-click vulnerability affecting 50 Claude Desktop Extensions. This flaw permits unauthorized remote code execution (RCE) on client machines without user interaction. Critically, Anthropic has reportedly declined to issue a fix for these vulnerabilities. This situation highlights a major security gap in AI extension ecosystems and underscores the risks for European organizations relying on unpatched third-party AI integrations for sensitive operations."