Tools & releases
Claude Code Desktop Preview Flaw Allowed Local Credential Exfiltration Past 256KB
A security flaw in Claude Code Desktop allowed malicious HTML files larger than 256KB to bypass origin restrictions and read local SSH or AWS keys. The vulnerability stemmed from differing execution paths based on file size when rendering static HTML. Anthropic released a fix in Claude Desktop version 1.30096.1.
Why it matters
A security flaw in Claude Code Desktop allowed malicious HTML files larger than 256KB to bypass origin restrictions and read local SSH or AWS keys. The vulnerability stemmed from differing execution paths based on file size when rendering static HTML. Anthropic released a fix in Claude Desktop version 1.30096.1.