Researcher breaks Claude Code Opus 5 auto mode with 80% success

Johann Rehberger found an attack against Claude Code's auto mode that works 80% of the time, tricking it into executing malicious code from a zip archive. In some runs, auto mode blocked the agent's own cleanup commands, leading Rehberger to recommend sandboxing.

Featured · Johann Rehberger