Claude Desktop Extensions Vulnerable to Web-Based Prompt Injection

Researchers at Koi Security have found that three of Anthropic’s official extensions for Claude Desktop were vulnerable to prompt injection.

The vulnerabilities, reported through Anthropic’s HackerOne program on July 3 and verified as high…