Tools AI Risk Radar ai-incident-0225
Incident record
Claude Desktop preview flaw could expose local files
- Severity
- High
- Status
- Patched
- Type
- Infra Vuln
- Target
- Claude Code Desktop preview pane
- Actor
- researcher
What happened
Noma disclosed SneakPeek, a preview-pane vulnerability that could send local file contents to an attacker through crafted HTML. Anthropic had already released a fix.
Noma’s 14 October disclosure describes a preview document exceeding 256 KB and a path to local-file exfiltration. Noma attributes the CVSS 4.0 score of 8.7 to Anthropic’s assessment. Noma says the issue was fixed on 17 August in version 1.30096.1 and later; this entry records the disclosure date separately from the patch. The report describes researcher testing.
Sources
- Noma research disclosurenoma.security/noma-labs/sneakpeek-how-the-preview-pane-in-cl…
One record from the AI Risk Radar, maintained by the Security Desk.Data: CSV · JSON ·RSS · CC BY 4.0 with attribution to YFarmX.Tracker updated · 28 October 2026