Jerusalem, 15 October, 2026 (TPS-IL) — An Israeli cybersecurity research team has identified a high-severity vulnerability in Anthropic’s Claude Code Desktop application that could have exposed users’ passwords and other sensitive data.
Noma Labs, part of Tel Aviv-based Noma Security, said the flaw allowed attackers to secretly access files containing cloud credentials, encryption keys and login tokens by tricking the application into displaying a malicious file. Following disclosure by the Israeli researchers in July, Anthropic released a comprehensive security fix in August. Noma Labs published details of the discovery on October 14.