A tester ran the email fix 23 times. Eight leaks got through.
Claude Code, Anthropic’s command-line coding agent, was putting users’ signed-in account emails into the outbound User-Agent headers of web requests it wrote itself — and Anthropic’s fix, shipped November 3, 2026 in version 2.1.317, does not catch every route the leak can take.
Hook: A tester ran the email fix 23 times. Eight leaks got through.
Context: Claude Code put the user’s signed-in account email into outbound User-Agent headers when the agent composed curl commands or scripts for web research. One documented request tied a project name, an email, and an address query together. Anthropic shipped a built-in privacy mod, cc-plugin-privacy, in v2.1.317 on November 3, 2026, which blocks the exact leak — but an independent test of the shipped code found 8 of 23 leak shapes still pass, including scripts the agent writes and runs itself.
Stakes: Every web server logs User-Agent headers by default, so a leaked email is a verified, active developer address in a stranger’s log. The reporter says scam emails followed. Anthropic’s own README calls the fix a courtesy, not a boundary.
Payoff: Your agent should not introduce you to strangers — update Claude Code, check what your agent sends, and send this to a developer who uses Claude Code.
Watch next: OpenAI buys Pierre — the code-storage startup joining Codex’s Git workflows.
How we verified this: The bug report is public on Anthropic’s own Claude Code issue tracker (issue #107757, filed November 5, 2026), with the follow-up cases documented in the same thread. The fix is in Anthropic’s public repo (cc-plugin-privacy, v2.1.317, November 3, 2026). The 8-of-23 result comes from an independent tester who ran the shipped privacy code 23 times against its own cases. The “dozens of scam emails per day” detail is the reporter’s own account, not independently verified.
Instagram reel: https://www.instagram.com/p/DfaltgLgPvP/
Sources:
https://github.com/anthropics/claude-code/issues/107757
https://dev.to/frankchu/8-leaks-pass-anthropics-23-test-email-fix-2e66
https://tin.computer/blog/claude-code-email-user-agent
https://www.professorclaw.ai/thoughts/2026-11-06/09-00/morning-briefing-november-6-2026
https://www.instagram.com/simpleaiexplains/
https://buymeacoffee.com/simpleaiexplains
Leave a Reply