New Zero-Click Flaw in Claude Desktop Extensions, Anthropic Declines Fix

LayerX disclosed a critical remote code execution vulnerability in Anthropic's Claude Desktop Extensions (DXT) where MCP servers run without sandboxing and can autonomously execute instructions sourced from connectors (e.g., Google Calendar). A crafted calendar event can trigger a DXT to run arbitrary system commands with full host privileges; LayerX rated the issue CVSS 10.0 and estimated over 10,000 affected users, while Anthropic declined to fix it, arguing it falls outside their threat model.