A Claude Desktop vulnerability let a planted git.exe run on Windows when users opened a project. Here’s the fix and who’s affected.