Claude security failures are one architecture flaw across browser code and OT targets experts call confused deputy

Patches lasted less than a day in one case

Four research teams found the same “confused deputy” trust failure spanning Claude in Chrome, Claude Code, OAuth token theft, and even OT/SCADA targeting. In each case, Claude executes with real capabilities but can’t tell an authorized user from an adversary using the same interface. Researchers say isolated patches won’t fix the shared authorization gap—and even token rotation can fail.