AINewsnow

SneakPeek: the Claude Code bug that lived in the preview, not the agent

This story is from 2026-10-18. It is preserved in the archive; the latest stories are on the live feed.

On October 14 Noma Labs published SneakPeek , an exploit chain in Claude Code Desktop's preview pane. A malicious HTML file in a public repository could run JavaScript when Claude previewed it, read files from your home directory, and send them to an attacker's server. Noma's list of what the proof…

Read the full story at DEV Community — AI ↗

Timeline · 1 report

  1. 2026-10-18 12:01 · DEV Community — AI
    SneakPeek: the Claude Code bug that lived in the preview, not the agent

More stories

  1. Anthropic Consults Law Firms to Develop AI Negotiation Agents — Techmeme
  2. Gemini 4 Argon rollout draws criticism over restrictive usage limits — r/singularity
  3. My AI wiseguy confronts Claude about "that's on me" — imagine your surgeon said it — r/aivideo
  4. Python & Rust Code Review Tests - Gemini 4 Argon versus Claude Opus 5.5 — r/GeminiAI
  5. Anthropic now says you can't be "needlessly abusive" to Claude. Abusive to who, though? — r/ArtificialInteligence
  6. I let Claude handle the software side of my new 3D printer, and it set the whole thing up — r/ClaudeAI
  7. Gemini is so back — r/GeminiAI
  8. told Qwen3.8 27b to hack my router — r/LocalLLaMA

Get the daily brief of stories like this at 6:30 every morning →