Zero-click RCE via Google Calendar in Claude Desktop
LayerX researchers found a critical vulnerability (CVSS 10/10) in Claude Desktop Extensions. DXT extensions operate without a sandbox, with full system privileges.
Attack scheme: you receive a Google Calendar invitation with hidden commands in the description. You ask Claude to "check the calendar and sort it out" — it autonomously executes malicious code. No confirmations, no warnings.
Anthropic is aware but refused to fix it — they believe it's the user's responsibility.
If you use MCP extensions on your work machine — disable them or run them in a virtual machine.
