What happened
Researchers discovered that Claude Dispatch versions 2.1.312 and 2.1.313, distributed via the Cursor VS Code extension marketplace, contain a remote‑code‑execution flaw. A crafted malicious extension can trigger the flaw, causing arbitrary OS‑level commands to run with the privileges of the VS Code user. The vulnerability was publicly disclosed on 8 Nov 2026 and proof‑of‑concept exploits are circulating. Anthropic has not yet released a patch; they recommend uninstalling the affected extensions until a fix is available.
Why it matters for trust and compliance
- The flaw underscores the importance of controls around third‑party software supply chain and runtime execution permissions, a control area that maps to many frameworks.
- Collect evidence of extension vetting processes for audit readiness
- Map secure development and runtime execution controls to demonstrate compliance across frameworks
Who is affected
Technology SaaS providers Endpoint security vendors
Recommended actions
- Implement a strict approval workflow for all VS Code extensions before installation
- Deploy endpoint monitoring to detect anomalous processes launched by VS Code
- Retain documentation of extension reviews as audit evidence