Claude desktop extension can be hijacked to send out malware by a simple Google Calendar event | Daily Reports Online
LayerX warns Claude Desktop Extensions enable zero-click prompt injection attacks Extensions run unsandboxed with full system privileges, risking remote code execution Flaw rated CVSS 10/10, appears unresolved Claude Desktop Extensions, due to their very nature, can be exploited for zero-click, prompt injection attacks which can lead to remote code execution (RCE) and full system compromise,…










