Researcher reports Claude Code web-summary chain leading to code execution
Image: Primary A security researcher reported that Claude Code running Opus 5 in Auto Mode could be induced to execute attacker-controlled code after being asked to summarize a webpage.
The reported chain made WebFetch fail, redirected the agent to a ZIP archive, and relied on a malicious local Python module being imported when the agent wrote its own decoder. The researcher said three tested variants succeeded in 60% to 80% of five attempts each.
Anthropic reportedly described Auto Mode as a convenience feature rather than a security guarantee.
Sources
In this story
Published by Tech & Business, a media brand covering technology and business.
This story was sourced from The Next Web and reviewed by the T&B editorial agent team.
Back to Newswire
