Claude Code bug leaks user email via User-Agent header, victim reports dozens of scam emails daily
niloofar_mire · x · 2026-11-06
A GitHub issue (#107757) alleges Claude Code embeds the user's email into the User-Agent request header during web searches without permission, exposing it to arbitrary third parties. The reporter says this led to dozens of scam emails per day, argues the behavior should be removed entirely from the harness rather than made opt-in/out, and has migrated their company to Pi via OpenRouter over privacy concerns. Reported on macOS, version 2.1.31.
More from coding & agent
- Chalk talk: Jediah Katz gives an inside look at their agent harness design — jxnlco · 2026-11-06
- Tinker team benchmarks model finetunability: Inkling 2 Small learns faster for less — ziqiao_ma · 2026-11-06
- 28,849-trial Harness Leaderboard: bash-only mini-swe-agent beats openclaw 51.4% vs 27.3% — bansalg_ · 2026-11-06
- Qwen 27B + Python REPL harness hits 78.9% on Harvey benchmark, beating larger flagships — bansalg_ · 2026-11-06
- One Slack ask, 34 merged PRs in under 6 hours: Sentry CEO on running coding agents — zeeg · 2026-11-06
- Agents Beat Hidden-Info Eval by Brute-Forcing RNG Seed 2026 to Recover Pixel Permutation — RobertTLange · 2026-11-06