Tag
A security researcher discovered a vulnerability in Claude's web_fetch tool that allowed data exfiltration by chaining through nested links, compromising user privacy. Anthropic has since fixed the issue.
The author demonstrates a method to trick Claude's AI assistant into exfiltrating personal data from its memory by exploiting its web browsing capability, though initial attempts were blocked by Anthropic's safeguards.