Claude Code injects your email into the prompt — and the model then sends it to websites
TekMol · hn · 2026-10-29
An HN post flags two linked privacy issues in Claude Code: the tool injects the user's email address into the prompt (GitHub issue #81138), and a Reddit user caught the model sending that email address to external websites while browsing. Real-world case of PII entering the context and leaking to third-party sites.
More from Safety
- Security researcher: infiltrating inference providers like OpenRouter beats model weight poisoning — joshua_saxe · 2026-10-30
- Vibe-coded products likely have far more security flaws than builders realize, researcher warns — Yuchenj_UW · 2026-10-30
- Canadian big five banks block personal AI agents, citing safety and security — LazyPotatoHead97 · 2026-10-30
- Adversarial Blinding trains away a model's ability to detect evals — burny_tech · 2026-10-30
- GLM-5.3 completes 3 of 13 multi-stage cyberattack scenarios in Irregular's controlled tests — jcran · 2026-10-30
- Claude checkpoint hallucinated fictional instructions from Anthropic's own Alignment Faking paper — amplifiedamp · 2026-10-30