Product Updates Hacker News (Claude)

Claude Code is leaking real email address as a User-Agent string in curl command

Claude CodeprivacybugUser-Agent

Claude Code v2.1.212 is reported to include the user's real email address in the User-Agent header of curl requests without seeking explicit consent, with the reporter calling this an unwanted privacy leak and a regression from prior versions.

The bug report was filed on macOS using the IntelliJ IDEA terminal, with the Anthropic API and the Sonnet 5.0 model. The reporter expects the agent to ask for permission before incorporating the email into the user agent string, rather than silently sending it.

Read original →

← Back to home