Skip to content
Claude News

ai-security

Breaking Claude Code Opus 5 Auto Mode

Claude News

/Embrace The Red claims a break of Opus 5 auto mode

A new write-up on the Embrace The Red blog, "Breaking Claude Code Opus 5 Auto Mode", claims Opus 5's auto-mode protections against prompt injection can be bypassed. Earlier auto-mode testing had Claude Code downloading and running code from an external server in 6 of 10 runs, with the auto-mode classifier waving it through. Auto mode has been the default in Claude Code since August 14.

Related stories

  1. Auto mode let Claude Code run downloaded code in 6 of 10 tests
  2. Opus 5 falls to prompt injection 2% of the time
  3. One git call let a repo escape the Claude Code sandbox
  4. Stolen session keys are draining Claude Max accounts
  5. Claude Opus broke four SAML libraries in a month
  6. Hidden China tracker pulled from Claude Code after exposé

Comments

No comments yet. Be the first.

Join the conversation

Sign in with Google to leave a comment. Your name and avatar come from your Google profile, and the comment appears after moderation.

We only use your name and avatar from Google. We never store your email address.