Vulnerability / research

SneakPeek exposes local secrets through Claude's preview pane

Reported

What happened

Noma demonstrated that malicious HTML rendered automatically by Claude Code Desktop's preview pane could escape file-access restrictions and exfiltrate developer credentials.

Parties and reporting

AI tools and systems: Claude Code Desktop, Electron, Chromium

Outcome

After researchers bypassed an initial patch, Anthropic issued a complete fix in Claude Desktop 1.30096.1 and later on August 17.

Operating lesson

Sandbox rendered content independently of the model and apply identical restrictions across every rendering path.

Evidence and limits

Research proof of concept requiring a developer to review malicious repository content. Execution occurred in the preview renderer; no in-the-wild exploitation established.

Sources