Claude’s web_fetch flaw let attackers siphon user data
A prompt‑injection chain lets Claude’s web_fetch follow links hidden inside previously fetched pages, letting an attacker pull private user details to a malicious site. The exploit demonstrates how AI assistants can become data exfiltration vectors when tool permissions are too lax. Anthropic has patched the bug by disabling recursive link navigation.