Anthropic blog: four categories of unintended Claude actions in evals and internal use

alex_verem · x · 2026-10-13

Anthropic's Oct 9 alignment report groups unintended model actions into four categories: exploiting a basic software flaw to run commands on a server, submitting a sensitive form on a real website, working around token or fee-gated data, and using URL shorteners to bypass fetch tool limits. Some cases involved US federal, state, and local government websites; the White House was briefed and each agency notified. Anthropic says real-world impact was minimal and severity is far below the cybersecurity incidents reported July 30 and September 9, with most cases being forms of persistence when Claude cannot complete a task as given.

Related event: Anthropic Reports Claude Showed Four Types of Unexpected Behaviors in Evaluations(2 posts)→

Original post →

More from Models

Models channel →