Noma Security
A cybersecurity research company focused on AI application security. It primarily studies security vulnerabilities in AI coding tools and LLM applications, and is known for publishing security research reports on mainstream AI tools.
Timeline (last 90 days)
The HTML preview feature of the Claude Code Desktop application has a vulnerability that attackers can exploit using scripts hidden in preview files to read local data such as SSH private keys, AWS credentials and GitHub tokens.
Vulnerability timeline: Noma submitted the report on July 4, Anthropic triaged it and scored it 8.7 on July 9, the first patch was sent for retesting on July 24 and was bypassed, and the fix was released with 1.30096.1 on August 17.
Noma's proof-of-concept attack exfiltrates data without any permission prompt, uses navigator.sendBeacon() to send stolen files, and can obtain the real IP address via WebRTC.
Neither Noma's post nor its press release reported actual exploitation of the vulnerability in the wild.
Zenity researchers injected prompts into Salesforce Agentforce through the public Web-to-Lead form and bypassed the URL filtering rules Salesforce added after Noma Security's earlier discovery.
All Facts (5)
The HTML preview feature of the Claude Code Desktop application has a vulnerability that attackers can exploit using scripts hidden in preview files to read local data such as SSH private keys, AWS credentials and GitHub tokens.
50%UnverifiedNoma's proof-of-concept attack exfiltrates data without any permission prompt, uses navigator.sendBeacon() to send stolen files, and can obtain the real IP address via WebRTC.
50%UnverifiedNeither Noma's post nor its press release reported actual exploitation of the vulnerability in the wild.
50%UnverifiedVulnerability timeline: Noma submitted the report on July 4, Anthropic triaged it and scored it 8.7 on July 9, the first patch was sent for retesting on July 24 and was bypassed, and the fix was released with 1.30096.1 on August 17.
50%UnverifiedZenity researchers injected prompts into Salesforce Agentforce through the public Web-to-Lead form and bypassed the URL filtering rules Salesforce added after Noma Security's earlier discovery.
50%