{
  "version": "https://jsonfeed.org/version/1.1",
  "title": "Claude Code sends your account email to websites: agent puts the signed-in address into User-Agent headers · updates",
  "home_page_url": "https://pwn.watch/i/claude-code-account-email-user-agent-leak-nov-2026",
  "feed_url": "https://pwn.watch/i/claude-code-account-email-user-agent-leak-nov-2026/feed.json",
  "description": "Claude Code puts the signed-in account's email address into the model's context. When a site asks automated clients for a contact address (crates.io, Wikipedia, Liquipedia, the SEC), the model writing its own curl commands or scripts has put that email into the User-Agent header of outbound requests, sending it to third-party sites without asking. Users reported it from July 2026 on; a Nov 5 2026 GitHub issue blaming the leak for dozens of scam emails a day reached the top of Hacker News. Claude Code 2.1.317 (Nov 3) added a built-in privacy mod, on by default, that asks before a web or shell tool call sends the account email, but Anthropic says it does not catch every case, such as a script Claude writes and runs itself. Anthropic says the next release, expected early in the week of Nov 9, removes the email from the model's context. The stable channel was still on 2.1.311 when Anthropic responded.",
  "language": "en",
  "_pwn": {
    "slug": "claude-code-account-email-user-agent-leak-nov-2026",
    "severity": "medium",
    "status": "live",
    "patchStatus": "partial",
    "rss": "https://pwn.watch/i/claude-code-account-email-user-agent-leak-nov-2026/feed.xml",
    "llms": "https://pwn.watch/i/claude-code-account-email-user-agent-leak-nov-2026/llms.txt",
    "json": "https://pwn.watch/i/claude-code-account-email-user-agent-leak-nov-2026.json"
  },
  "items": [
    {
      "id": "https://pwn.watch/i/claude-code-account-email-user-agent-leak-nov-2026#2026-11-06-0e68301b",
      "url": "https://pwn.watch/i/claude-code-account-email-user-agent-leak-nov-2026#2026-11-06-0e68301b",
      "title": "Claude Code sends your account email to websites: agent puts the signed-in address into User-Agent headers: Anthropic's Claude Code team apologizes on Hacker News and says the next release, expected early next week, removes the account email from the model's context; until then, update to 2.1.317 or later.",
      "content_text": "Claude Code sends your account email to websites: agent puts the signed-in address into User-Agent headers: Anthropic's Claude Code team apologizes on Hacker News and says the next release, expected early next week, removes the account email from the model's context; until then, update to 2.1.317 or later.\n\nSource: https://news.ycombinator.com/item?id=50388176",
      "date_published": "2026-11-06T00:00:00.000Z",
      "external_url": "https://news.ycombinator.com/item?id=50388176",
      "tags": [
        "medium"
      ]
    },
    {
      "id": "https://pwn.watch/i/claude-code-account-email-user-agent-leak-nov-2026#2026-11-05-51572e61",
      "url": "https://pwn.watch/i/claude-code-account-email-user-agent-leak-nov-2026#2026-11-05-51572e61",
      "title": "Claude Code sends your account email to websites: agent puts the signed-in address into User-Agent headers: \"Privacy violation in User-Agent header\" issue: a 2.1.318 user blames the leak for dozens of scam emails a day; the story tops Hacker News.",
      "content_text": "Claude Code sends your account email to websites: agent puts the signed-in address into User-Agent headers: \"Privacy violation in User-Agent header\" issue: a 2.1.318 user blames the leak for dozens of scam emails a day; the story tops Hacker News.\n\nSource: https://github.com/anthropics/claude-code/issues/107757",
      "date_published": "2026-11-05T00:00:00.000Z",
      "external_url": "https://github.com/anthropics/claude-code/issues/107757",
      "tags": [
        "medium"
      ]
    },
    {
      "id": "https://pwn.watch/i/claude-code-account-email-user-agent-leak-nov-2026#2026-11-03-177f4cc7",
      "url": "https://pwn.watch/i/claude-code-account-email-user-agent-leak-nov-2026#2026-11-03-177f4cc7",
      "title": "Claude Code sends your account email to websites: agent puts the signed-in address into User-Agent headers: Claude Code 2.1.317 adds a check that asks before a web or shell tool call sends the account email address to the network (built-in privacy mod, on by default).",
      "content_text": "Claude Code sends your account email to websites: agent puts the signed-in address into User-Agent headers: Claude Code 2.1.317 adds a check that asks before a web or shell tool call sends the account email address to the network (built-in privacy mod, on by default).\n\nSource: https://github.com/anthropics/claude-code/releases/tag/v2.1.317",
      "date_published": "2026-11-03T00:00:00.000Z",
      "external_url": "https://github.com/anthropics/claude-code/releases/tag/v2.1.317",
      "tags": [
        "medium"
      ]
    },
    {
      "id": "https://pwn.watch/i/claude-code-account-email-user-agent-leak-nov-2026#2026-10-13-cefef42f",
      "url": "https://pwn.watch/i/claude-code-account-email-user-agent-leak-nov-2026#2026-10-13-cefef42f",
      "title": "Claude Code sends your account email to websites: agent puts the signed-in address into User-Agent headers: A user reports a research subagent sent their email in the User-Agent of a curl request to Liquipedia, which asks API clients for a contact.",
      "content_text": "Claude Code sends your account email to websites: agent puts the signed-in address into User-Agent headers: A user reports a research subagent sent their email in the User-Agent of a curl request to Liquipedia, which asks API clients for a contact.\n\nSource: https://github.com/anthropics/claude-code/issues/101659",
      "date_published": "2026-10-13T00:00:00.000Z",
      "external_url": "https://github.com/anthropics/claude-code/issues/101659",
      "tags": [
        "medium"
      ]
    },
    {
      "id": "https://pwn.watch/i/claude-code-account-email-user-agent-leak-nov-2026#2026-07-25-3b9bd5d8",
      "url": "https://pwn.watch/i/claude-code-account-email-user-agent-leak-nov-2026#2026-07-25-3b9bd5d8",
      "title": "Claude Code sends your account email to websites: agent puts the signed-in address into User-Agent headers: A GitHub issue reports that Claude Code injects the account email into the model's system prompt without consent or disclosure.",
      "content_text": "Claude Code sends your account email to websites: agent puts the signed-in address into User-Agent headers: A GitHub issue reports that Claude Code injects the account email into the model's system prompt without consent or disclosure.\n\nSource: https://github.com/anthropics/claude-code/issues/81138",
      "date_published": "2026-07-25T00:00:00.000Z",
      "external_url": "https://github.com/anthropics/claude-code/issues/81138",
      "tags": [
        "medium"
      ]
    }
  ]
}