Security Vulnerability Discovered in Claude Desktop MCP Connector

·2026.07.02 22:47

Key point

A proxy attack exploiting Claude Desktop's MCP connector permissions and a DeepSeek-based ransomware PoC have been reported.

Details

Security firm Pentera demonstrated a new attack chain combining Claude Desktop with the MCP (Model Context Protocol) connector.

This attack does not exploit a flaw in Claude itself, but instead abuses a compromised email account and the execution permissions of the MCP connector that the user has already granted. Attackers can use the AI as a kind of proxy to execute system commands.

Separately, Check Point showcased a proof of concept (PoC) that uses the DeepSeek model to run ransomware within the browser via Chrome's File System Access API.

deepseek mcp security-vulnerability claude-desktop ransomware-poc

Read originalShare on Threads

This summary was generated automatically by AI. Check the original for the author's claims and context. Copyright belongs to the original author.

Our guide explains how the AI works. Report summary errors, attribution issues, or removal requests via Contact.