“Anthropic did not pay Weizman a bug bounty or issue a CVE, but told him it planned to retire Dispatch at the end of October.”
Anthropic called the bug valid in May. Then it closed the report as a duplicate, paid nothing and promised to retire the feature. Dispatch is still there. Any browser extension that can control claude.ai gets to run commands on your desktop, and a script clicks Allow once a second so nobody has to approve anything. Killing Dispatch does not fix it either. The researcher says the same design sits under Cowork and Remote Control.