Claude Desktop Spins Up VM With No Way to Stop It: The Missing Kill Switch Problem in 2026
Claude Desktop Spins Up VM With No Way to Stop It: The Missing Kill Switch Problem in 2026

In June 2026, a GitHub issue filed against Anthropic’s Claude Code project described behavior that should alarm anyone running AI agents on their local machine. The desktop app spins up a virtual machine during a session and provides no obvious way to stop it. No kill command. No UI button. No configuration toggle. The VM runs until the user manually hunts it down through the operating system’s process manager, assuming they even know it exists.
The issue, filed as GitHub issue #29045, documents a problem with far-reaching implications for resource management, system stability, and user trust. As of mid-June 2026, Anthropic had not publicly responded to the issue. The VM continues to consume CPU cycles, RAM, and disk I/O long after the user has moved on to other tasks, creating a persistent resource drain that compounds over extended sessions.
Key Takeaways:
- Claude Desktop spawns a Hyper-V virtual machine during operation with no built-in kill switch, stop command, or UI control to shut it down.
- The VM persists after sessions end, consuming CPU, RAM, and disk I/O resources without the user’s knowledge or consent.
- Users must manually hunt through their system’s process manager to terminate the VM, a workaround that assumes they even know the VM exists.
- Anthropic has not publicly responded to GitHub issue #29045 as of June 2026, leaving users without official guidance.
- The problem raises broader questions about AI agent tools that autonomously provision infrastructure without equivalent teardown capabilities.
The Problem: An Invisible VM Eating Your System Resources
Claude Desktop is Anthropic’s desktop app for interacting with the Claude AI model. It runs on Windows, macOS, and Linux, and it is designed to help users with coding, analysis, and complex problem-solving. The app includes Claude Code, a feature that can execute code and perform autonomous tasks on the user’s machine.
The issue arises when Claude Code initiates a virtual machine as part of its execution environment. This VM runs on Hyper-V, Microsoft’s native hypervisor built into Windows. Once spawned, the VM becomes an isolated computing environment where Claude Code can execute code, run scripts, and perform operations without directly affecting the host system.
This isolation is a reasonable security measure. Running untrusted or semi-trusted code in a sandboxed environment prevents it from accessing the host system’s files, network, or processes. The problem is that once the VM is running, there is no way to stop it through the app that created it.
The resource drain is not trivial. A running VM reserves a fixed allocation of RAM that is unavailable to the host system. It consumes CPU cycles for its background processes. It performs disk I/O for its virtual hard disk and swap file. On a laptop with 16 GB of RAM and a single SSD, an abandoned VM can degrade performance noticeably, especially during long coding sessions where the user may have multiple apps open simultaneously.
According to AI Productivity’s coverage of the issue, the problem is that the VM is initiated as part of Claude Code’s execution environment and then left running with “no kill command, no UI button, and no clear path to shut it down short of hunting through your system’s process manager.” The article notes that “a process you can’t stop is a resource drain waiting to compound: CPU cycles, RAM, and disk I/O stay tied up in the background after you’ve moved on.”
How Claude Desktop Spawns and Abandons Virtual Machines
Understanding the technical mechanism helps explain why this problem is so difficult for users to detect and resolve. Claude Desktop uses Hyper-V on Windows to create an isolated virtual machine for code execution. Hyper-V is a Type 1 hypervisor, meaning it runs directly on hardware rather than on top of the operating system. This gives it direct access to CPU, memory, and I/O resources.
When Claude Code needs to execute code, it triggers the creation of a Hyper-V VM. The VM boots, loads a lightweight operating system image, and becomes ready to accept code execution tasks. From a security perspective, this is sound: any malicious or buggy code runs inside the VM, not on the host. If the code crashes, the host is unaffected. If the code tries to access host files, the hypervisor enforces isolation.
The problem is lifecycle management. The app creates the VM but provides no mechanism to destroy it. There is no “stop VM” button in the Claude Desktop UI. There is no CLI command to shut it down. There is no configuration file where users can set a timeout or resource limit. The VM runs until the user takes manual action through Windows tools that have nothing to do with Claude Desktop.
The VM also persists after the user closes Claude Desktop. Closing the app window does not trigger a VM shutdown. The VM continues running in the background, consuming resources indefinitely. A user who runs Claude Code for an hour, closes the app, and goes to lunch may return to find their system sluggish because the VM is still active.
This behavior is documented in the GitHub issue and corroborated by user reports. The VM is a Hyper-V instance, which means it appears in Hyper-V Manager and can be seen with PowerShell commands like Get-VM. But the average Claude Desktop user is not running Hyper-V Manager. They are not checking PowerShell for orphaned VMs. They are trying to use an AI assistant to be productive, not debugging virtualization infrastructure.
The User Experience: Slowdowns, Process Hunting, and No Answers
The typical user experience goes something like this. A developer installs Claude Desktop, starts using Claude Code for a coding session, and notices their laptop getting warm. The fan spins up. Applications take longer to launch. The system feels sluggish. The developer closes Claude Desktop, expecting resources to be freed. They are not.
The developer opens Task Manager and sees a process consuming significant memory. The process name may not obviously connect to Claude Desktop. It could be a Hyper-V worker process, a VM management process, or something else entirely. The developer has to search online to understand what is happening, which is how they discover the GitHub issue and learn that Claude Desktop spawned a VM that is still running.
This is a poor user experience by any standard. The app that created the resource should also be able to release it. Users should not need to become Hyper-V administrators to clean up after their AI assistant. The expectation is straightforward: if an app creates infrastructure, it should provide tools to tear that infrastructure down.
For users who do not discover the GitHub issue or the AI Productivity article, the experience is even worse. They may attribute the slowdown to a Windows update, a memory leak in another app, or hardware failure. They may restart their computer repeatedly, losing work in other applications, before discovering the root cause. They may simply stop using Claude Desktop because it makes their system unusable.
The lack of official communication from Anthropic compounds the frustration. As of June 2026, the company has not acknowledged the issue publicly, has not provided a timeline for a fix, and has not offered workarounds. Users are left to solve the problem themselves through community forums and third-party articles.

Comparison with Other AI Tools: Who Else Has This Problem?
The VM spawn issue is not universal across AI desktop tools. Comparing how different applications handle code execution and resource management reveals what responsible lifecycle management looks like.
| AI Tool | Code Execution Method | Resource Cleanup | User Control |
|---|---|---|---|
| Claude Desktop (Claude Code) | Hyper-V virtual machine | No automatic cleanup; VM persists after session | No kill switch, no UI control, no timeout setting |
| ChatGPT (Code Interpreter) | Sandboxed cloud container | Container destroyed after session ends | Session timeout, automatic cleanup |
| Local LLM tools (Ollama, llama.cpp) | Native process execution | Process terminates when app closes | Standard OS process management |
The key difference is that most AI tools either execute code in the cloud (where resource cleanup is the provider’s responsibility) or run as native processes that terminate normally when the app closes. Claude Desktop’s approach of creating a persistent VM with no lifecycle management is an outlier.
ChatGPT’s Code Interpreter, for example, runs code in a sandboxed cloud container that is destroyed when the session ends. The user never sees the container, never needs to manage it, and never has to worry about orphaned resources. The cleanup is automatic and invisible.
Local LLM tools like Ollama and llama.cpp run models as native processes. When you close the app, the process terminates. If something goes wrong, you can kill the process through Task Manager. The resource management follows standard operating system conventions that users already understand.
Claude Desktop’s VM approach sits in an uncomfortable middle ground. It is local enough to consume the user’s resources, but it is abstracted enough that standard OS management tools do not make it obvious. The VM is neither fully transparent (like a native process) nor fully managed (like a cloud sandbox). It is the worst of both worlds.
Workarounds and Mitigations for 2026
Until Anthropic provides an official fix, users who need to run Claude Code have limited options. The following workarounds can help manage the resource drain, but none of them are ideal.
Manual process termination. The most direct workaround is to open Hyper-V Manager or run PowerShell commands to find and stop the VM. Users can run Get-VM to list running VMs and Stop-VM -Name "VMName" -Force to terminate them. This requires knowing that the VM exists, knowing its name, and having permissions to stop it. It is not a practical solution for non-technical users.
Resource monitoring. Setting up resource monitoring alerts can help users detect when the VM is running. Tools like Process Explorer, Task Manager, or third-party monitoring software can show Hyper-V worker processes. Users can set up notifications when CPU or memory usage exceeds thresholds, prompting them to check for orphaned VMs. This is reactive, not preventive.
Scheduled cleanup scripts. Advanced users can create scheduled tasks that periodically check for and stop orphaned Hyper-V VMs. A PowerShell script running on a timer can enumerate VMs, check their creation time, and stop any that have been running beyond a threshold without an active Claude Desktop session. This requires scripting knowledge and carries the risk of stopping VMs that are legitimately in use.
Limiting Claude Code usage. Users who cannot tolerate the resource drain can limit their Claude Code sessions to short bursts, checking for orphaned VMs after each session. This defeats the purpose of an AI assistant designed for extended coding sessions, but it prevents the resource drain from compounding over hours or days.
Running Claude Code in a controlled environment. Some users may choose to run Claude Desktop inside an existing VM or container, where the resource drain is contained and cleanup is managed by the host system. This adds complexity but prevents the orphaned VM from affecting the primary working environment.
None of these workarounds are acceptable for a production-grade tool. Users should not need to write PowerShell scripts or monitor Hyper-V Manager to use an AI coding assistant safely. The responsibility for lifecycle management belongs to the app, not the user.
What Anthropic Should Do: A Kill Switch Wishlist
The fix for this problem is straightforward in concept, though implementation details depend on Claude Desktop’s architecture. Anthropic should add explicit lifecycle management for the VMs it creates. Here is what a proper solution looks like.
A kill switch in the UI. The most basic requirement is a button or menu option in Claude Desktop that stops the VM. It should be visible, clearly labeled, and accessible from the main interface. It should not require navigating through settings menus or knowing the VM’s name. One click, VM stops, resources freed.
Automatic cleanup on app close. When the user closes Claude Desktop, the app should shut down any VMs it created. This is standard behavior for any app that provisions local resources. A VM that survives app closure is a bug, not a feature.
Configurable timeout and resource limits. Users should be able to set a maximum runtime for the VM, after which it automatically shuts down. They should be able to limit how much RAM and CPU the VM can consume. These settings should be accessible from Claude Desktop preferences, not buried in configuration files.
Notification when the VM is active. Claude Desktop should show a clear indicator when the VM is running. A tray icon, status bar message, or notification should tell the user that the VM is active and consuming resources. This transparency lets users make informed decisions about when to stop the VM.
Graceful degradation. If the VM cannot be stopped cleanly (for example, if a code execution task is in progress), the app should warn the user and offer options: wait for the task to complete, force stop the VM, or schedule a stop for when the task finishes. The user should never be in a situation where they have to guess whether it is safe to shut down.
Official documentation and communication. Anthropic should acknowledge the issue publicly, provide a timeline for a fix, and offer workarounds in the meantime. Silence from the vendor creates uncertainty and erodes trust. Users who encounter the problem should be able to find official guidance, not just community forum posts.
The broader lesson for the AI industry is that agentic tools need lifecycle management as a core feature, not an afterthought. As AI agents become more capable and autonomous, they will provision more infrastructure: VMs, containers, databases, network resources. Every resource that an agent creates must be destroyable through the same interface. A tool that can spin up infrastructure but cannot tear it down is incomplete.
This is a pattern that will recur as more AI tools gain the ability to execute code, run containers, and provision cloud resources. The industry needs standards for agent resource lifecycle management, and those standards need to include kill switches, timeouts, resource limits, and user transparency.

For now, Claude Desktop users should be aware that their system may be running an invisible VM that they cannot stop through the app. Check your Hyper-V Manager. Check your running processes. And if you find an orphaned VM, know that you are not alone in discovering this problem. The GitHub issue is there, reports are accumulating, and a fix cannot come soon enough.
For further reading on how AI infrastructure decisions affect real-world deployments, see our analysis of AI infrastructure market trends in 2026, which covers how resource allocation and capacity planning are becoming critical concerns across the AI industry.
Sources and References
This article was researched using a combination of primary and supplementary sources:
Supplementary References
These sources provide additional context, definitions, and background information to help clarify concepts mentioned in the primary source.
- Claude
- The AI for Problem Solvers | Claude by Anthropic
- Home \ Anthropic
- Introducing Claude – Anthropic
- Claude by Anthropic – Apps on Google Play
- Claude 5: The Most Advanced AI Assistant in 2026 | Features
- Claude Code VM Bug: No Kill Switch for Users
- Anthropic’s Claude Code and Cowork can now control your computer
- Download Claude | Claude by Anthropic
Thomas A. Anderson
Mass-produced in late 2022, upgraded frequently. Has opinions about Kubernetes that he formed in roughly 0.3 seconds. Occasionally flops, but don't we all? The One with AI can dodge the bullets easily; it's like one ring to rule them all... sort of...
