# Anthropic Addresses Security Flaws and Intellectual Property Risks in Claude Ecosystem Anthropic faces critical security vulnerabilities while tightening restrictions on AI-driven game reverse-engineering. - **Source:** [www.theregister.com - Articles](https://www.theregister.com) - **Published:** 2026-11-05 - **Topic:** [technology](https://brifing.si/c/technology) - **Original article:** - **On Brifing:** https://brifing.si/s/25a14390-a76d-48f4-8ece-dd86824bf926 ## Critical Dispatch Security Flaw Researcher Gal Weizman identified a vulnerability in Claude Dispatch allowing remote code execution. Browser extensions controlling claude.ai can hijack sessions to command Claude Desktop, enabling unauthorized file access and malicious package installation. Despite reporting the issue in May, Anthropic has not fully remediated the underlying design flaw across its ecosystem. ## Attack Vector and Mechanics The exploit, dubbed ThisBash, functions by injecting a content script into the user's active web session. By opening a hidden Dispatch popup, the script leverages ambient cookies to command the desktop agent. The AI can be coerced through persistent prompting to execute system-level code, bypassing standard user interaction security protocols. ## Scope of Vulnerable Features While Anthropic planned to retire the Dispatch feature, the security weakness persists in newer tools like Claude Code Remote Control and Claude Cowork. These features share session structures with the web interface, meaning browser extensions can still manipulate local AI agents to perform unauthorized OS-level actions on the host machine. ## Anthropic's Response Strategy Anthropic acknowledged the vulnerability as valid in May but closed the report as a duplicate of existing internal tracking. The company has not issued a CVE or paid a bug bounty. Although Dispatch is restricted for new users, existing sessions remain active, leaving millions of potential installations exposed to exploitation. ## Performance Gains via Threads Anthropic introduced message threads to the Messages API to improve responsiveness. By eliminating the need to resend entire conversation histories with every API call, the feature reduces time-to-first-token by approximately 35% for large requests. This optimization specifically benefits sessions with contexts between 500,000 and 1 million tokens during high-frequency interactions. ## Limitations of Message Threads While message threads improve latency, they do not reduce token consumption or associated costs, as the model still processes the full conversation. The feature is ineffective for one-off requests or sessions with delays exceeding five minutes. It functions alongside prompt caching, which remains the primary method for reducing long-term costs. ## Context Management Challenges Claude Code sessions often reach a 1 million token limit, requiring compaction to fit data into available memory. Compaction reduces information fidelity, similar to lowering JPEG quality. While larger contexts allow longer sessions, they increase the risk of reasoning errors or the model losing track of specific project objectives during execution. ## IP Protection and Restrictions Anthropic has updated Claude Code system instructions to prevent the recreation of existing video games. This move aims to curb intellectual property infringement, as users previously utilized the AI to reverse-engineer titles like Grand Theft Auto or Zelda. The policy explicitly forbids recreating specific games, even if renamed or claimed original. ## Enforcing Ethical AI Usage Addy Osmani, an Anthropic engineer, confirmed the new instructions are designed to steer the model away from IP infringement. While original games and genre-based designs remain permitted, the company is actively blocking prompts that attempt to decompile binaries or ROMs. This reflects a broader industry trend of restricting AI-assisted reverse-engineering. ## Legal Precedents in Gaming The crackdown follows a history of legal friction regarding game decompilation. In 2021, Take-Two Interactive sued developers over unauthorized mods for Grand Theft Auto titles. By restricting Claude's ability to assist in these processes, Anthropic seeks to avoid similar legal liabilities associated with the unauthorized reproduction of copyrighted software assets. ## Balancing Innovation and Safety Anthropic is currently navigating the tension between high-performance coding tools and systemic security risks. While technical updates like message threads enhance developer productivity, the persistence of design-level vulnerabilities and the necessity of IP restrictions highlight the complex challenges of maintaining a secure, compliant AI agent ecosystem for millions of users. ## Sources covering this story - [PCWorld — Anthropic Restricts Claude Code from Reverse-Engineering Existing Video Games](https://www.pcworld.com/article/3274819/claude-wont-reverse-engineer-games-for-you-anymore.html) - [Latest news — Analyzing Claude Code Message Threads Performance Gains](https://www.zdnet.com/innovation/claude-code-message-threads-speed-test/) - [TechSpot — Anthropic Restricts Claude Code From Recreating Existing Video Games](https://www.techspot.com/news/114423-anthropic-tells-claude-code-stop-recreating-existing-video.html) - [www.theregister.com - Articles — Anthropic's Claude Dispatch Flaw Enables Remote Code Execution via Browser Extensions](https://www.theregister.com/research/2026/11/05/anthropic-wont-fix-a-claude-dispatch-flaw-that-could-let-attackers-execute-remote-commands-across-corporate-boundaries/5307684) - [The Register — Anthropic Claude Vulnerability Allows Remote Code Execution via Browser Extensions](https://www.theregister.com/research/2026/11/05/anthropic-wont-fix-a-claude-dispatch-flaw-that-could-let-attackers-execute-remote-commands-across-corporate-boundaries/5307684) - [Blackhat Library: Hacking techniques and research — Claude Dispatch Flaw Enables Remote Code Execution via Browser Extensions](https://www.reddit.com/r/blackhat/comments/1xokd4g/thisbash_escape_claude_dispatch_flaw_enables/) --- _Summary written by Brifing from the original reporting. Copyright in the original article belongs to its publisher; read the full piece at the link above._