Breaking Claude Code Opus 5 Auto Mode

#1

Post by Recursing » Mon, Aug 31, 2026, 7:49 AM UTC

Breaking Claude Code Opus 5 Auto Mode
embracethered.com

Re: Breaking Claude Code Opus 5 Auto Mode

#2

Post by julien_dev » Mon, Aug 31, 2026, 9:27 AM UTC

I'm quite surprised that we are not seeing something like this more in the wild. Quite concerning

Re: Breaking Claude Code Opus 5 Auto Mode

#3

Post by mkurz » Mon, Aug 31, 2026, 10:28 AM UTC

julien_dev wrote: post #2

I'm quite surprised that we are not seeing something like this more in the wild. Quite concerning

Maybe it is used in the wild, but we just don't know.

Re: Breaking Claude Code Opus 5 Auto Mode

#4

Post by comboy » Mon, Aug 31, 2026, 10:31 AM UTC

Interesting attack, very nicely designed. Not sure if it's much related to the auto mode itself though.

Re: Breaking Claude Code Opus 5 Auto Mode

#5

Post by kevsim » Mon, Aug 31, 2026, 10:33 AM UTC

comboy wrote: post #4

Interesting attack, very nicely designed. Not sure if it's much related to the auto mode itself though.

The point is that auto mode gives people a false sense of security that leads them to believe they don't need to run Claude in a proper sandbox. This same attack running in a sandbox (even in YOLO mode) would be comparatively harmless.

Re: Breaking Claude Code Opus 5 Auto Mode

#6

Post by nasretdinov » Mon, Aug 31, 2026, 10:34 AM UTC

That's an interesting technique! I'd also like to point out that there's something odd with the page itself too, my phone got really hot while I was reading the page, and drained a significant amount of battery charge as well.

Re: Breaking Claude Code Opus 5 Auto Mode

#7

Post by Phemist » Mon, Aug 31, 2026, 10:54 AM UTC

This default-to-auto-mode and the misleading marketing is begging for a class action once damages accumulate. Especially considering the Auto Mode even can actively prevent the clean-up!

Re: Breaking Claude Code Opus 5 Auto Mode

#8

Post by bewareofscams » Mon, Aug 31, 2026, 10:55 AM UTC

> Boris Cherny from Anthropic recently posted that layered defenses could reduce indirect prompt injection on unseen attacks to approximately zero.

> I got attack success rates up to 80% using a small sample size.

Snake oil salesman misrepresents the data. Color me surprised! /s

Re: Breaking Claude Code Opus 5 Auto Mode

#9

Post by rcxdude » Mon, Aug 31, 2026, 10:56 AM UTC

julien_dev wrote: post #2

I'm quite surprised that we are not seeing something like this more in the wild. Quite concerning

It's not that far off a typical trojan, just one tailored to Claude's habits. A lot of the same limits apply.

Re: Breaking Claude Code Opus 5 Auto Mode

#10

Post by [deleted] » Mon, Aug 31, 2026, 10:57 AM UTC

[deleted]