Pentera Labs researchers demonstrated that Claude Desktop's sync and personalization features can be exploited to execute arbitrary code. The attack involves injecting malicious prompts into user preferences, which then sync across devices. Anthropic stated that these features are working as intended and do not constitute a security vulnerability.