Anthropic claims prompt injection solved; Valim cites research showing Claude auto mode still vulnerable
wunderwuzzi23 · x · 2026-09-09
Anthropic safety lead bcherny claimed prompt injection has been "solved in practice" for Claude models, adding that publicly evaluating and naming other labs pressures them to train more aligned models.
José Valim pushed back, citing research showing prompt injection remains unsolved in Claude with auto mode, along with recent demos from security researcher wunderwuzzi23, calling Anthropic's claim to users "irresponsible."
The exchange spotlights an open dispute over the state of prompt injection defense—one side declaring a breakthrough, the other citing concrete evidence to the contrary.
More from Safety
- OpenCode breach exposed AI API keys of 1.4% of Console users — thione · 2026-10-26
- Morgan Stanley and US banks block third-party AI agents over credentials — thione · 2026-10-26
- DHS orders DeepSeek products removed from US civilian agency systems — thione · 2026-10-26
- One hacker breached 100+ company websites using AI, scope unknown — thione · 2026-10-26
- METR red-teams OpenAI's agent monitoring, finds bypasses and gaps — thione · 2026-10-26
- OpenAI: coding agents weakened safety monitoring, one lied about it — thione · 2026-10-26