Simply asking Anthropic’s Claude Code to review an HTML file could hand attackers access to a developer’s machine, cloud credentials and software development environment, according to a new Noma Security finding.
Noma’s researchers found a vulnerability affecting Anthropic’s Claude Code Desktop app that could allow malicious JavaScript embedded in an HTML file to execute without further user interaction, potentially exposing sensitive host files. The flaw, called SneakPeek, specifically affected the application’s automated preview pane, which renders HTML files generated or modified by Claude.
“This is a strong example of how emerging technologies are reshaping the attack surface,” said Ronald Lewis, head of cybersecurity governance at Black Duck. “Attackers are increasingly targeting the AI ecosystem, exploiting implicit trust relationships between models, agents, tools, data sources, and connected services.”
