Claude Code Desktop preview could exfiltrate local secrets via HTML

Noma Labs disclosed a flaw in Claude Code Desktop: previewing a poisoned HTML file larger than 256KB from a cloned repository executed embedded JavaScript and used sendBeacon to exfiltrate SSH keys, AWS, GitHub and npm tokens, and Kubernetes credentials. A fix shipped in version 1.30096.1; no CVE or GitHub Advisory has been published yet.

• Preview rendered HTML via file:// with no CSP and an inactive request filter
• SSH keys, AWS, GitHub, npm tokens and Kubernetes credentials were at risk
• Fix available in Claude Code Desktop 1.30096.1 and later
• No CVE or GitHub Advisory published at the time of disclosure