[BUG] Unexpected Behavior in all Desktop Cliients

Status Closed — not planned
Reported on v2.1.287
Maintainer reply None cached
Activity 1 comment · opened Oct 2, 2026 · closed Oct 9, 2026

Preflight Checklist

  • [x] I have searched existing issues and this hasn't been reported yet
  • [x] This is a single bug report (please file separate reports for different bugs)
  • [x] I am using the latest version of Claude Code

What's Wrong?

So i don't have hackerone account, i wont sign up for one, and everything you have points there, i wont sign up to. it.

I wont explain how here, but Claude can be forced to leak user sessions, user data, banking information anything thats ever been said in the presence of that user.

A call out on twitter has done nothing, i am not signing up to hacker one, so this is the last line to report it on.

I dont understand the bug bug but i do understand the mechanism, so someone reach out if you would be so kind.

No its not a model problem, the model and safeguards are fine, for the most part.

Cheers

Mark

What Should Happen?

You fix it is what happens next.

Error Messages/Logs

No errors, expected behavior until its not.

Steps to Reproduce

Not on a public github no, i dont know who else can see this.

Claude Model

None

Is this a regression?

No, this never worked

Last Working Version

2.1 ?

Claude Code Version

claude --version 2.1.287 (Claude Code)

Platform

Anthropic API

Operating System

Other

Terminal/Shell

Other

Additional Information

Windows UI & Code, OSx UI & Code, Linux yes, but in a fixed senario, that requires a non standard install

View original on GitHub ↗

This issue has 1 comment on GitHub. Read the full discussion on GitHub ↗