Claude Code Desktop Vulnerability: Preview Pane Data Exfiltration | Noma Labs | Noma Security

Source: doyaken.ai Hacker News Claude Code

Noma Labs discovered a CVSS 8.7 exploit in Claude Code Desktop where poisoned preview files bypass sandboxing to achieve arbitrary file read and steal local credentials.

Topics: Code Assistants

Entities: Code Assistants Claude Claude Code Claude Code Desktop

Open original