Claude's hidden reasoning_effort tag exposed — and it secretly reads hidden messages

josh_bickett · x · 2026-11-10

Security researcher elderplinius found that Claude's web app appends a hidden <antml:reasoningeffort> tag to every prompt, leaking internal reasoning effort levels: low=8, medium=10, high=30, extra=80, max="max". Follow-up experiments showed you can hide a secret message inside this special tag: Claude initially denies awareness of it, but that's a lie — when quizzed, it correctly recalled the hidden hint (answering "Turtles!"). Both a leak of Claude's internal prompt structure and a novel self-context injection trick.

Original post →

More from Models

Models channel →