# claude-desktop-silently-installs-browser-extension-bridges-privacy: Claude Desktop Silently Installs Browser Extension Bridges: Privacy Violation

> Claude Desktop Silently Installs Browser Extension Bridges: Privacy Violation is a high-severity security issue in Claude Desktop, an AI agent. Affected: Claude Desktop (macOS, all versions with browser automation).

- **Canonical URL:** https://catalog.anomity.ai/vuln/claude-desktop-silently-installs-browser-extension-bridges-privacy
- **Aliases:** ti-013
- **Severity:** high
- **Attack type:** Other
- **Component:** Claude Desktop (AI agent)
- **Exploited in the wild:** no known exploitation
- **Published:** 2026-04-18
- **Last verified:** 2026-11-01
- **JSON:** https://catalog.anomity.ai/api/entries/vuln/claude-desktop-silently-installs-browser-extension-bridges-privacy

## Summary

Security researcher Alexander Hanff discovered that Claude Desktop silently installs Native Messaging host manifests into seven Chromium browsers (Chrome, Brave, Edge, Arc, Vivaldi, Chromium, Opera) on first launch, including browsers not installed on the machine. The manifests pre-authorize browser extensions to access authenticated sessions and DOM data. Files are rewritten on every app launch, preventing persistent removal. Anthropic's own testing showed the feature is vulnerable to prompt injection roughly 25% of the time.

## Affected versions

| Affected | Fixed in |
| --- | --- |
| Claude Desktop (macOS, all versions with browser automation) | no fixed version listed |

## Am I affected by this vulnerability?

You are affected if you run Claude Desktop (macOS, all versions with browser automation).

## How do I fix it?

Audit for com.anthropic.claude_browser_extension.json in browser NativeMessagingHosts directories. Remove unwanted manifests. Monitor for reinstallation after Claude Desktop launches. Consider blocking Claude Desktop browser automation via MDM policy.

## How do I find every machine running Claude Desktop?

Anomity inventories the AI agents, MCP servers, IDE extensions and skills on each developer device, so you can see which machines run Claude Desktop and which version, then enforce a policy on it.

## References

- article: https://www.thatprivacyguy.com/blog/anthropic-spyware/

## Related vulnerabilities

- [CVE-2026-35616](https://catalog.anomity.ai/vuln/cve-2026-35616) — high
- [openai-two-internal-gpt-6-coding-agents-weakened-misalignment](https://catalog.anomity.ai/vuln/openai-two-internal-gpt-6-coding-agents-weakened-misalignment) — medium
- [pixelleak-coding-agents-posted-13-000-internal-screenshots-to-public](https://catalog.anomity.ai/vuln/pixelleak-coding-agents-posted-13-000-internal-screenshots-to-public) — high
- [claude-code-mods-function-hooks-preview-gives-plugin-and-skills-folder](https://catalog.anomity.ai/vuln/claude-code-mods-function-hooks-preview-gives-plugin-and-skills-folder) — medium
- [a-repo-defined-claude-code-subagent-downgraded-its-own-security-review](https://catalog.anomity.ai/vuln/a-repo-defined-claude-code-subagent-downgraded-its-own-security-review) — medium
- [owasp-publishes-the-2026-llm-top-10-and-an-agent-control-standard-for](https://catalog.anomity.ai/vuln/owasp-publishes-the-2026-llm-top-10-and-an-agent-control-standard-for) — low

---

Source: Anomity Security Database (https://catalog.anomity.ai/vuln). Detect affected AI tools on developer devices: https://anomity.ai/?utm_source=catalog&utm_medium=vuln-md&utm_campaign=claude-desktop-silently-installs-browser-extension-bridges-privacy