Data exfiltration vulnerability in Claude's web_fetch tool

Ayush Paul discovered a hole in Claude's web_fetch tool that allows data exfiltration attacks, bypassing existing protections. The attack exploits the lethal trifecta pattern, risking exposure of user secrets.

Featured · Ayush Paul