Canonical event

Noma publishes SneakPeek Claude Desktop preview vulnerability disclosure

On 14 October 2026 Noma Labs published a technical disclosure of a Claude Desktop HTML preview vulnerability allowing local file access when rendering untrusted repository HTML. Researchers report July disclosure to Anthropic and final remediation August 17. The October event is a publication, not a newly discovered in-the-wild compromise or a new October fix.