published 2026-08-27
A prompt injection hidden in a website that Claude Code is asked to summarize can hijack it and get code execution on your machine. Tests showed a 60-80% attack success rate, even though an Anthropic-commissioned evaluation claimed 0%.
Source: embracethered.com
FixLane has a reviewed fix procedure for this incident: a read-only check first, then the fix. Ask the Telegram bot, or connect an AI agent to the FixLane MCP server and call get_fix_prompt with incident id 1740 and your operating system.