Evidence · DiggingBeagle record
Noma Labs SneakPeek disclosure for Claude Code Desktop preview
Researcher account of a Claude Code Desktop preview-pane path, including a 256 KB file threshold, a Web Worker bypass and an August remediation. Live page retrieval was unavailable; independent contemporaneous reporting corroborates the central mechanism.
- Published
- Oct 14, 2026
- Publisher
- Noma Labs / Eli Ainhorn
- Source role
- primary disclosure
Evidence record
Researcher account of a Claude Code Desktop preview-pane path, including a 256 KB file threshold, a Web Worker bypass and an August remediation. Live page retrieval was unavailable; independent contemporaneous reporting corroborates the central mechanism.
Claim-level citations (3)
- supportsClaude Desktop HTML preview could expose local developer files: The researcher reports that the initial file-request patch was bypassed using a blob-backed Web Worker and that a complete update shipped in Claude Desktop 1.30096.1 on August 17, 2026.
Bypassing the Fix and Disclosure Timeline, August 17 entry
- supportsClaude Desktop HTML preview could expose local developer files: In the controlled proof of concept, an attacker-authored repository report caused the preview renderer to read local developer credential files and send their contents off host.
Vulnerability Proof of Concept, One Question, Full Compromise
- supportsClaude Desktop HTML preview could expose local developer files: Noma Labs reports that HTML previews exceeding 256 KB were loaded through file URLs without the CSP used for smaller previews, enabling JavaScript in an attacker-provided report to run.
The Sandbox Bypass, file size and file:// paragraphs