{"id":184165,"date":"2026-11-06T11:41:02","date_gmt":"2026-11-06T09:41:02","guid":{"rendered":"https:\/\/prohoster.info\/blog\/news\/claude-code-raskryval-email-polzovatelya-pri-obrashhenii-k-nekotorym-sajtam"},"modified":"2026-11-06T11:41:08","modified_gmt":"2026-11-06T09:41:08","slug":"claude-code-exposed-user-email-addresses-when-accessing-certain-websites","status":"publish","type":"post","link":"https:\/\/prohoster.info\/pt\/blog\/news\/claude-code-exposed-user-email-addresses-when-accessing-certain-websites","title":{"rendered":"Claude Code revelava o email do usu\u00e1rio ao acessar certos sites.","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"

Foi identificada uma falha de privacidade no agente de IA Claude Code, que acarretava no vazamento de endere\u00e7os de email ao acessar certos sites de terceiros. O email era inclu\u00eddo no cabe\u00e7alho HTTP User-Agent sem o consentimento do usu\u00e1rio e sem a possibilidade de desativar esse comportamento. A substitui\u00e7\u00e3o ocorria para sites espec\u00edficos, como Wikipedia e SEC (Securities and Exchange Commission), que n\u00e3o aceitam solicita\u00e7\u00f5es de bots sem o email do propriet\u00e1rio. De acordo com o coment\u00e1rio de um representante da Anthropic, tal atividade n\u00e3o era uma funcionalidade intencionalmente adicionada, mas uma a\u00e7\u00e3o aut\u00f4noma do modelo de IA, que considerou as exig\u00eancias para formata\u00e7\u00e3o de solicita\u00e7\u00f5es de bots e as diretrizes da RFC-9110, que prescrevem a transmiss\u00e3o de um email de contato para solicita\u00e7\u00f5es automatizadas.<\/p>\n

As informa\u00e7\u00f5es sobre o email associado \u00e0 conta do usu\u00e1rio foram fornecidas ao modelo de IA do Claude Code para que ele pudesse considerar o contexto ao lidar com tarefas relacionadas ao usu\u00e1rio e sua conta. Sem esse contexto, o modelo gerava informa\u00e7\u00f5es fict\u00edcias, como nos r\u00f3tulos \u00ab@author\u00bb. Um efeito colateral foi que o modelo de IA passou a usar o email n\u00e3o apenas para os fins esperados, mas tamb\u00e9m na execu\u00e7\u00e3o de tarefas auxiliares, como inseri-lo no campo User-Agent ao gerar strings para o utilit\u00e1rio curl. <\/p>\n

Para bloquear o vazamento de email em solicita\u00e7\u00f5es externas
\num plugin cc-plugin-privacy foi preparado, que est\u00e1 inclu\u00eddo no pacote padr\u00e3o de plugins e ativado por padr\u00e3o na vers\u00e3o claude-code 2.1.317. O plugin solicita confirma\u00e7\u00e3o do usu\u00e1rio antes de aplicar ferramentas da web ou gerar comandos no estilo curl, que mencionam o email. O plugin n\u00e3o resolve todos os poss\u00edveis caminhos de vazamento, por exemplo, n\u00e3o ajuda em situa\u00e7\u00f5es em que Claude gera e executa um script por conta pr\u00f3pria.
\nPara bloquear completamente o problema, na pr\u00f3xima vers\u00e3o do Claude Code, que est\u00e1 programada para ser lan\u00e7ada em alguns dias, foi decidido remover o email do contexto transmitido ao modelo de IA.
\n
Fonte: opennet.ru<\/a> <\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"

\u0412 AI-\u0430\u0433\u0435\u043d\u0442\u0435 Claude Code \u0432\u044b\u044f\u0432\u043b\u0435\u043d\u0430 \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u0430 \u0441 \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0435\u043d\u0438\u0435\u043c \u043a\u043e\u043d\u0444\u0438\u0434\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u043e\u0441\u0442\u0438, \u043f\u0440\u0438\u0432\u043e\u0434\u0438\u0432\u0448\u0430\u044f \u0443\u0442\u0435\u0447\u043a\u0435 \u0441\u0432\u0435\u0434\u0435\u043d\u0438\u0439 \u043e\u0431 email-\u0430\u0434\u0440\u0435\u0441\u0435 \u043f\u0440\u0438 \u043e\u0431\u0440\u0430\u0449\u0435\u043d\u0438\u0438 \u043a \u043d\u0435\u043a\u043e\u0442\u043e\u0440\u044b\u043c \u0441\u0442\u043e\u0440\u043e\u043d\u043d\u0438\u043c \u0441\u0430\u0439\u0442\u0430\u043c. Email \u0443\u043a\u0430\u0437\u044b\u0432\u0430\u043b\u0441\u044f \u0432 HTTP-\u0437\u0430\u0433\u043e\u043b\u043e\u0432\u043a\u0435 User-Agent \u0431\u0435\u0437 \u0441\u043e\u0433\u043b\u0430\u0441\u0438\u044f \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f \u0438 \u0431\u0435\u0437 \u0432\u043e\u0437\u043c\u043e\u0436\u043d\u043e\u0441\u0442\u0438 \u043e\u0442\u043a\u043b\u044e\u0447\u0438\u0442\u044c \u0442\u0430\u043a\u043e\u0435 \u043f\u043e\u0432\u0435\u0434\u0435\u043d\u0438\u0435. \u041f\u043e\u0434\u0441\u0442\u0430\u043d\u043e\u0432\u043a\u0430 \u043e\u0441\u0443\u0449\u0435\u0441\u0442\u0432\u043b\u044f\u043b\u0430\u0441\u044c \u0434\u043b\u044f \u043e\u0442\u0434\u0435\u043b\u044c\u043d\u044b\u0445 \u0441\u0430\u0439\u0442\u043e\u0432, \u0442\u0430\u043a\u0438\u0445 \u043a\u0430\u043a Wikipedia \u0438 SEC (Securities and Exchange Commission), \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u043d\u0435 \u043f\u0440\u0438\u043d\u0438\u043c\u0430\u044e\u0442 \u0437\u0430\u043f\u0440\u043e\u0441\u044b \u043e\u0442 \u0431\u043e\u0442\u043e\u0432, \u0432 […]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":10,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[702],"tags":[],"class_list":["post-184165","post","type-post","status-publish","format-standard","hentry","category-news"],"aioseo_notices":[],"aioseo_head":"\n\t\t\n\t\n\t\n\t\n\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\n","aioseo_head_json":{"title":"\ud83e\udd47Claude Code expunha o email do usu\u00e1rio ao acessar certos sites | ProHoster","description":"Foi identificada uma falha de privacidade no agente de IA Claude Code, que acarretava no vazamento de endere\u00e7os de email ao acessar certos sites de terceiros.","canonical_url":"https:\/\/prohoster.info\/pt\/blog\/news\/claude-code-exposed-user-email-addresses-when-accessing-certain-websites","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"pt_PT","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47Claude Code \u0440\u0430\u0441\u043a\u0440\u044b\u0432\u0430\u043b email \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f \u043f\u0440\u0438 \u043e\u0431\u0440\u0430\u0449\u0435\u043d\u0438\u0438 \u043a \u043d\u0435\u043a\u043e\u0442\u043e\u0440\u044b\u043c \u0441\u0430\u0439\u0442\u0430\u043c | ProHoster","og:description":"\u0412 AI-\u0430\u0433\u0435\u043d\u0442\u0435 Claude Code \u0432\u044b\u044f\u0432\u043b\u0435\u043d\u0430 \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u0430 \u0441 \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0435\u043d\u0438\u0435\u043c \u043a\u043e\u043d\u0444\u0438\u0434\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u043e\u0441\u0442\u0438, \u043f\u0440\u0438\u0432\u043e\u0434\u0438\u0432\u0448\u0430\u044f \u0443\u0442\u0435\u0447\u043a\u0435 \u0441\u0432\u0435\u0434\u0435\u043d\u0438\u0439 \u043e\u0431 email-\u0430\u0434\u0440\u0435\u0441\u0435 \u043f\u0440\u0438 \u043e\u0431\u0440\u0430\u0449\u0435\u043d\u0438\u0438 \u043a \u043d\u0435\u043a\u043e\u0442\u043e\u0440\u044b\u043c \u0441\u0442\u043e\u0440\u043e\u043d\u043d\u0438\u043c \u0441\u0430\u0439\u0442\u0430\u043c.","og:url":"https:\/\/prohoster.info\/pt\/blog\/news\/claude-code-exposed-user-email-addresses-when-accessing-certain-websites","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2026-11-06T09:41:02+00:00","article:modified_time":"2026-11-06T09:41:08+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":[],"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/pt\/wp-json\/wp\/v2\/posts\/184165","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/pt\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/pt\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/pt\/wp-json\/wp\/v2\/users\/10"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/pt\/wp-json\/wp\/v2\/comments?post=184165"}],"version-history":[{"count":1,"href":"https:\/\/prohoster.info\/pt\/wp-json\/wp\/v2\/posts\/184165\/revisions"}],"predecessor-version":[{"id":184166,"href":"https:\/\/prohoster.info\/pt\/wp-json\/wp\/v2\/posts\/184165\/revisions\/184166"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/pt\/wp-json\/wp\/v2\/media?parent=184165"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/pt\/wp-json\/wp\/v2\/categories?post=184165"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/pt\/wp-json\/wp\/v2\/tags?post=184165"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}