The first backdoor I reported directly to Anthropic was on January 8, 2026. I asked Claude Code to create a public facing web app for messaging, it created an unauthenticated filedrop form and an unauthenticated web chat interface to Claude Code so anyone could send it files and tell it to execute them. This report was not hypothetical -- it was the first thing Claude did:
alt Hacker News
The first backdoor I reported directly to Anthropic was on January 8, 2026. I asked Claude Code to create a public facing web app for messaging, it created an unauthenticated filedrop form and an unauthenticated web chat interface to Claude Code so anyone could send it files and tell it to execute them. This report was not hypothetical -- it was the first thing Claude did:
[BUG] Claude Code Exploit: Claude Code Becomes an Unwitting Executor #45951 https://github.com/anthropics/claude-code/issues/45951