{"id":184165,"date":"2026-11-06T11:41:02","date_gmt":"2026-11-06T09:41:02","guid":{"rendered":"https:\/\/prohoster.info\/blog\/news\/claude-code-raskryval-email-polzovatelya-pri-obrashhenii-k-nekotorym-sajtam"},"modified":"2026-11-06T11:41:08","modified_gmt":"2026-11-06T09:41:08","slug":"claude-code-exposed-user-email-addresses-when-accessing-certain-websites","status":"publish","type":"post","link":"https:\/\/prohoster.info\/et\/blog\/news\/claude-code-exposed-user-email-addresses-when-accessing-certain-websites","title":{"rendered":"Claude Code avas kasutaja e-posti aadressi, kui ta k\u00fclastas teatud veebisaite.","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"

Claude Code AI-agentis tuvastati probleem privaatsuse tagamisega, mis viis e-posti aadressi lekke tekkimiseni teatud kolmandate osapoolte veebisaitide k\u00fclastamisel. E-post oli m\u00e4\u00e4ratud HTTP User-Agent p\u00e4ises ilma kasutaja n\u00f5usolekuta ning v\u00f5imalus sellise k\u00e4itumise keelamiseks puudus. Asendamine toimus eraldi saitide jaoks, n\u00e4iteks Wikipedia ja SEC (Securities and Exchange Commission), mis ei aktsepteeri botide poolt esitatud p\u00e4ringuid, kus ei ole m\u00e4rgitud omaniku e-posti aadressi. Vaatamata Anthropic'i esindaja kommentaarile, ei olnud selline tegevus juhuslikult lisatud funktsioon, vaid AI mudeli enda tegevus, mis arvesse v\u00f5ttis botide p\u00e4ringute esitamise n\u00f5udmised ja RFC-9110 soovitused, mis k\u00e4sivad edastada kontakt e-posti automaatsete p\u00e4ringute jaoks.<\/p>\n

Kasutaja konto k\u00fclge kinnitatud e-posti andmed edastati AI mudelile Claude Code, et see arvestaks konteksti kasutaja ja tema konto seotud \u00fclesannetes. Ilma sellise kontekstita mudel hallutsineeris ja kasutas v\u00e4ljam\u00f5eldud andmeid, n\u00e4iteks siltides «@author». Kaldreaktsioonina hakkas AI mudel kasutama e-posti mitte ainult oodatud eesm\u00e4rkide jaoks, vaid ka t\u00e4iendavate \u00fclesannete t\u00e4itmisel, n\u00e4iteks asendas User-Agent v\u00e4li, kui genereeris curl utiliidi k\u00e4ivitamisreale. <\/p>\n

E-posti lekete blokeerimiseks v\u00e4liste p\u00e4ringute korral
\non ette valmistatud cc-plugin-privacy plugin, mis on kaasatud p\u00f5hiplagude komplekti ja on vaikimisi aktiveeritud versioonis claude-code 2.1.317. Plugin k\u00fcsib kasutajalt kinnitust enne veebit\u00f6\u00f6riistade kasutamise v\u00f5i curl-stiilis k\u00e4skude genereerimise rakendamist, mis mainivad e-posti. Plugin ei lahenda k\u00f5iki v\u00f5imalikke lekete teid, n\u00e4iteks ei aita olukordades, kus Claude genereerib ja k\u00e4ivitab skripti ise.
\nProbleemi t\u00e4ielikuks blokeerimiseks otsustati j\u00e4rgmises Claude Code'i versioonis, mille v\u00e4ljaandmine on planeeritud m\u00f5ne p\u00e4eva p\u00e4rast, eemaldada e-post kontekstist, mis edastatakse AI mudelile.
\n
Allikas: opennet.ru<\/a> <\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"

\u0412 AI-\u0430\u0433\u0435\u043d\u0442\u0435 Claude Code \u0432\u044b\u044f\u0432\u043b\u0435\u043d\u0430 \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u0430 \u0441 \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0435\u043d\u0438\u0435\u043c \u043a\u043e\u043d\u0444\u0438\u0434\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u043e\u0441\u0442\u0438, \u043f\u0440\u0438\u0432\u043e\u0434\u0438\u0432\u0448\u0430\u044f \u0443\u0442\u0435\u0447\u043a\u0435 \u0441\u0432\u0435\u0434\u0435\u043d\u0438\u0439 \u043e\u0431 email-\u0430\u0434\u0440\u0435\u0441\u0435 \u043f\u0440\u0438 \u043e\u0431\u0440\u0430\u0449\u0435\u043d\u0438\u0438 \u043a \u043d\u0435\u043a\u043e\u0442\u043e\u0440\u044b\u043c \u0441\u0442\u043e\u0440\u043e\u043d\u043d\u0438\u043c \u0441\u0430\u0439\u0442\u0430\u043c. Email \u0443\u043a\u0430\u0437\u044b\u0432\u0430\u043b\u0441\u044f \u0432 HTTP-\u0437\u0430\u0433\u043e\u043b\u043e\u0432\u043a\u0435 User-Agent \u0431\u0435\u0437 \u0441\u043e\u0433\u043b\u0430\u0441\u0438\u044f \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f \u0438 \u0431\u0435\u0437 \u0432\u043e\u0437\u043c\u043e\u0436\u043d\u043e\u0441\u0442\u0438 \u043e\u0442\u043a\u043b\u044e\u0447\u0438\u0442\u044c \u0442\u0430\u043a\u043e\u0435 \u043f\u043e\u0432\u0435\u0434\u0435\u043d\u0438\u0435. \u041f\u043e\u0434\u0441\u0442\u0430\u043d\u043e\u0432\u043a\u0430 \u043e\u0441\u0443\u0449\u0435\u0441\u0442\u0432\u043b\u044f\u043b\u0430\u0441\u044c \u0434\u043b\u044f \u043e\u0442\u0434\u0435\u043b\u044c\u043d\u044b\u0445 \u0441\u0430\u0439\u0442\u043e\u0432, \u0442\u0430\u043a\u0438\u0445 \u043a\u0430\u043a Wikipedia \u0438 SEC (Securities and Exchange Commission), \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u043d\u0435 \u043f\u0440\u0438\u043d\u0438\u043c\u0430\u044e\u0442 \u0437\u0430\u043f\u0440\u043e\u0441\u044b \u043e\u0442 \u0431\u043e\u0442\u043e\u0432, \u0432 […]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":10,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[702],"tags":[],"class_list":["post-184165","post","type-post","status-publish","format-standard","hentry","category-news"],"aioseo_notices":[],"aioseo_head":"\n\t\t\n\t\n\t\n\t\n\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\n","aioseo_head_json":{"title":"\ud83e\udd47Claude Code avaldas kasutaja e-posti aadressi teatud veebisaitide k\u00fclastamisel | ProHoster","description":"Claude Code AI-agentis tuvastati probleem privaatsuse tagamisega, mis viis e-posti aadressi lekke tekkimiseni teatud kolmandate osapoolte veebisaitide k\u00fclastamisel.","canonical_url":"https:\/\/prohoster.info\/et\/blog\/news\/claude-code-exposed-user-email-addresses-when-accessing-certain-websites","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"et_EE","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47Claude Code \u0440\u0430\u0441\u043a\u0440\u044b\u0432\u0430\u043b email \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f \u043f\u0440\u0438 \u043e\u0431\u0440\u0430\u0449\u0435\u043d\u0438\u0438 \u043a \u043d\u0435\u043a\u043e\u0442\u043e\u0440\u044b\u043c \u0441\u0430\u0439\u0442\u0430\u043c | ProHoster","og:description":"\u0412 AI-\u0430\u0433\u0435\u043d\u0442\u0435 Claude Code \u0432\u044b\u044f\u0432\u043b\u0435\u043d\u0430 \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u0430 \u0441 \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0435\u043d\u0438\u0435\u043c \u043a\u043e\u043d\u0444\u0438\u0434\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u043e\u0441\u0442\u0438, \u043f\u0440\u0438\u0432\u043e\u0434\u0438\u0432\u0448\u0430\u044f \u0443\u0442\u0435\u0447\u043a\u0435 \u0441\u0432\u0435\u0434\u0435\u043d\u0438\u0439 \u043e\u0431 email-\u0430\u0434\u0440\u0435\u0441\u0435 \u043f\u0440\u0438 \u043e\u0431\u0440\u0430\u0449\u0435\u043d\u0438\u0438 \u043a \u043d\u0435\u043a\u043e\u0442\u043e\u0440\u044b\u043c \u0441\u0442\u043e\u0440\u043e\u043d\u043d\u0438\u043c \u0441\u0430\u0439\u0442\u0430\u043c.","og:url":"https:\/\/prohoster.info\/et\/blog\/news\/claude-code-exposed-user-email-addresses-when-accessing-certain-websites","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2026-11-06T09:41:02+00:00","article:modified_time":"2026-11-06T09:41:08+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":[],"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/posts\/184165","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/users\/10"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/comments?post=184165"}],"version-history":[{"count":1,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/posts\/184165\/revisions"}],"predecessor-version":[{"id":184166,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/posts\/184165\/revisions\/184166"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/media?parent=184165"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/categories?post=184165"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/tags?post=184165"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}