- Anthropic’s Claude extension flaws allow fake clicks to launch sensitive AI workflows
- Researchers found vulnerable handlers unchanged across eight extension updates
- Synthetic clicks bypassed checks designed to confirm real user actions
Security researchers at Manifold Security have claimed Anthropic's Claude for Chrome browser extension contains two unpatched vulnerabilities in version 1.0.80, released July 7, 2026.