{"id":211890,"date":"2026-02-09T12:30:00","date_gmt":"2026-02-09T17:30:00","guid":{"rendered":"https:\/\/news-you-need.com\/index.php\/2026\/02\/09\/new-zero-click-flaw-in-claude-extensions-anthropic-declines-fix\/"},"modified":"2026-02-10T06:35:13","modified_gmt":"2026-02-10T11:35:13","slug":"new-zero-click-flaw-in-claude-extensions-anthropic-declines-fix","status":"publish","type":"post","link":"https:\/\/news-you-need.com\/index.php\/2026\/02\/09\/new-zero-click-flaw-in-claude-extensions-anthropic-declines-fix\/","title":{"rendered":"New Zero-Click Flaw in Claude Extensions, Anthropic Declines Fix"},"content":{"rendered":"

New Zero-Click Flaw in Claude Extensions, Anthropic Declines Fix<\/a><\/p>\n

https:\/\/www.infosecurity-magazine.com\/news\/zeroclick-flaw-claude-dxt\/<\/a><\/p>\n

Publish Date: 2026-02-09 12:30:00<\/a><\/p>\n

Source Domain: www.infosecurity-magazine.com<\/a><\/p>\n

A single Google Calendar event can silently compromise a system running Claude Desktop Extensions, according to security researchers at browser security provider LayerX.<\/p>\n

In a new report published on February 9, LayerX, disclosed a new critical vulnerability affecting 50 Claude Desktop Extensions (DXT).<\/p>\n

If exploited this flaw allows an attacker to perform remote code executions (RCE) on a system running a vulnerable extension, without needing for the victim to click on anything.<\/p>\n

This issue was allocated a maximum-severity rating (CVSS of 10.0) and could impact over 10,000 active Claude DXT users.<\/p>\n

Roy Paz, principal security researcher at LayerX, said his team reported the vulnerability to Anthropic, the company behind the Claude large language model (LLM)and associated services, including Claude DTX. However, Anthropic \u201cdecided not to fix it at this time,\u201d Paz added<\/p>\n

Claude DXT: Full Privileges on the Host System<\/strong><\/h2>\n

Claude Desktop Extensions are different from traditional browser extensions. Like a typical Chrome browser extension, a Claude DXT offers a one-click installation process.<\/p>\n

While a Chrome extension is a simple browser add-on comprising .crx packages, Claude DXT are Model Context Protocol (MCP) servers packaged and distributed through Anthropic\u2019s extension marketplace. Each DXT is made up of a .mcpb bundle, which Paz likened to a .zip archive file, that includes the MCP server implementation code as well as a manifest defining the extension\u2019s exposed functions.<\/p>\n

The differences go even further in the authorizations granted to Claude DXT. While Chrome extensions run inside a tightly sandboxed browser environment and don\u2019t have direct system access, Claude DXT execute without sandboxing and with full privileges on the host system, LayerX\u2019s Paz noted.<\/p>\n

As a result, Claud DXT can perform sensitive commands, such as:<\/p>\n