Infosecurity-Magazine
Zero-Click RCE Vulnerability Discovered in Claude Desktop Extensions
First seen 9 Feb 2026, 23:30 UTC
•
+13
•35.5
Export
Article Content
Browse articles
A zero-click remote code execution (RCE) vulnerability has been identified in Claude Desktop Extensions, allowing attackers to compromise systems through a single Google Calendar event. This flaw affects over 10,000 users and 50 extensions, as the extensions operate with full system privileges. LayerX reported the vulnerability on February 9, 2026, but Anthropic has declined to issue a fix.
Analyzing cluster data...
Referenced clusters:
Something went wrong. Please try again.
Timeline
2025-07-03
Vulnerabilities reported through Anthropic's HackerOne program
2025-11-05
Koi Security finds prompt injection vulnerabilities in Claude extensions
2026-02-09
LayerX reports zero-click RCE vulnerability in Claude Desktop Extensions
More articles in this cluster
Continue Reading
Singapore's Telco Sector Faces AI-Driven Cyber Threats, Urgent Action Required
LiteLLM Supply Chain Attack Exposes Critical Credentials
Critical Vulnerabilities Discovered in CrowdStrike LogScale and Other Security Tools
Anthropic Accuses Alibaba of Largest AI Distillation Attack to Date
Critical Vulnerability in Claude Code GitHub Actions Exposes Repositories to Attacks
Evolution of Chinese-Nexus Cyber Operations: Strategic Long-Term Threats