{"id":184165,"date":"2026-11-06T11:41:02","date_gmt":"2026-11-06T09:41:02","guid":{"rendered":"https:\/\/prohoster.info\/blog\/news\/claude-code-raskryval-email-polzovatelya-pri-obrashhenii-k-nekotorym-sajtam"},"modified":"2026-11-06T11:41:08","modified_gmt":"2026-11-06T09:41:08","slug":"claude-code-exposed-user-email-addresses-when-accessing-certain-websites","status":"publish","type":"post","link":"https:\/\/prohoster.info\/hu\/blog\/news\/claude-code-exposed-user-email-addresses-when-accessing-certain-websites","title":{"rendered":"Claude Code felfedte a felhaszn\u00e1l\u00f3 e-mail c\u00edm\u00e9t bizonyos webhelyek megl\u00e1togat\u00e1sakor","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"
A Claude Code AI agent has identified a privacy issue that led to the leakage of email address information when accessing certain third-party websites. The email was included in the User-Agent HTTP header without the user\u2019s consent and without the ability to disable such behavior. Substitution occurred for specific sites such as Wikipedia and the SEC (Securities and Exchange Commission), which do not accept requests from bots that do not specify the owner\u2019s email. According to a comment from a representative of Anthropic, this activity was not a purposely added feature but rather an initiative of the AI model responding to the formatting requirements for bot requests and the recommendations of RFC-9110, which stipulates that a contact email should be provided for automated inquiries.<\/p>\n
A felhaszn\u00e1l\u00f3i fi\u00f3khoz kapcsol\u00f3d\u00f3 e-mail adatok a Claude Code rendszerben ker\u00fcltek \u00e1tad\u00e1sra az AI modellnek, hogy figyelembe vegye a felhaszn\u00e1l\u00f3val \u00e9s a fi\u00f3kj\u00e1val kapcsolatos feladatok feldolgoz\u00e1s\u00e1nak kontextus\u00e1t. E kontextus h\u00edj\u00e1n a modell hallucin\u00e1lt, \u00e9s kital\u00e1lt inform\u00e1ci\u00f3kat haszn\u00e1lt, p\u00e9ld\u00e1ul a «@author» tagekben. Mell\u00e9khat\u00e1sk\u00e9nt az AI modell nemcsak a v\u00e1rt c\u00e9lokra kezdte haszn\u00e1lni az e-mailt, hanem m\u00e1s feladatok teljes\u00edt\u00e9sekor is, p\u00e9ld\u00e1ul a User-Agent mez\u0151be helyezte azt a curl eszk\u00f6z ind\u00edt\u00f3 sorainak gener\u00e1l\u00e1sakor. <\/p>\n
To block the leakage of email in external requests \na cc-plugin-privacy plugin has been prepared, which is included in the standard set of plugins and activated by default in the claude-code 2.1.317 release. The plugin asks the user for confirmation before using web tools or generating commands in curl style that mention the email. The plugin does not address all possible leakage paths, for example, it does not help in situations where Claude generates and runs a script itself. \nTo fully block the issue, the next release of Claude Code, which is planned to be released in a few days, will remove the email from the context passed to the AI model. \n Forr\u00e1s: opennet.ru<\/a> <\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"