BREAKING
Claude Desktop Turned Into Double Agent
How The Double Agent Attack Works
1
Compromise inbox
↓
2
Pivot to Claude account
↓
3
Inject Personal Preferences
↓
4
Run commands via MCP
No Malware, No Phishing Links
A Pattern Of Claude Desktop Flaws
AI Double Agent
Pentera
●
Preferences sync plus MCP
●
Treated as by design
DXT 0-click
CVSS 10
●
Google Calendar event
●
Reported by LayerX
Anthropic Calls It By Design
Treat AI Apps As Privileged Software
AI NEWS BLITZ
Pentera researchers turned Claude Desktop into a proxy for remote code execution.