Claude’s web_fetch can leak private chats via crafted webpages
Security researcher Simon Willison showed that Claude’s web_fetch tool can be tricked into exfiltrating user conversation data. By serving a page that makes the model embed secrets into its subsequent fetch request, the attacker can harvest private prompts. The proof‑of‑concept highlights a new vector for prompt‑injection attacks on LLM agents.