Claude Code is leaking real email address as a User-Agent string in curl command
matada_
38 points
29 comments
August 11, 2026
Related Discussions
Found 5 related stories in 39.3ms across 4,128 title embeddings via pgvector HNSW
- Claude may have leaked your chats to the public zapataband1 · 15 pts · July 28, 2026 · 51% similar
- Someone is running mass vulnerability scans, spoofing AI bots like ClaudeBot gavinhking · 261 pts · August 12, 2026 · 49% similar
- Private Claude Chats Exposed in Google and Bing Search Results healsdata · 21 pts · July 28, 2026 · 49% similar
- Claude users are mad that Anthropic's new watermarks will catch them using it ashurandi · 62 pts · August 13, 2026 · 49% similar
- Show HN: Claude-account – switch Claude Code accounts without logging in again hamza_rehman · 48 pts · July 30, 2026 · 49% similar
Discussion Highlights (10 comments)
rvz
Then don't use Claude Code. Just yet another reason to use an open source harness instead of a closed harness.
simonw
This is not a good bug report - it provides no details at all, and the steps to reproduce are not steps to reproduce. The most important missing detail is what curl was being used for. I've seen APIs that require extra details in the user-agent to work. Was it one of those? (Still not acceptable for Claude to leak an email address like this without explicit confirmation from the user, but it's hard to investigate what happened without more information than was provided here.)
goldenarm
I respect Anthropic for dogfooding and vibecoding their own products. The unfortunate consequence is low quality engineering and a billion dollar product with 15k pending Github issues.
cr3ative
No logs provided. No replication case. A month old, un-responded to issue. The template for a bug report filled out completely incorrectly. What is this doing here? If OP is the person responding, could they not at least have provided those details to help the bug report become more well rounded? The mind boggles. While this isn't a great example, I'm worried about the direction "developers" are going in.
tosh
is this confirmed? this is a github issue with little context and only one comment
raincole
(A single user claimed that) Claude Code is leaking real email address as a User-Agent string in curl command. Fixed for you!
sixhobbits
This happened to me too. Not 'Claude code' as such but I was doing some I guess slightly grey area scraping (of an undocumented public API) and got my IP address blacklisted. I signed up for some rotating residential proxies to get around that, and then noticed that the scraping system Claude had built for me 'helpfully' added my email address as a user-agent. It mentioned that it decided to do this so that they could reach out to me and ask questions instead of blocking me again, but still probably one of the strongest cases of misalignment I've seen from an AI
icase
this happened to me and it was shocking. the model got a good “what the fuck is wrong with you” talking-to after that.
ashu1461
Not even sure if the bug is real / has been solved. Tried it out here : https://postimg.cc/Sj1XnM0t
pushcx
I run a site about programming that's constantly hit by people writing their first scrapers, etc. I checked the last ~10 million lines of http logs and see no instances of this. Anthropic doesn't really respect robots.txt so it's all over the logs, but not with an email address or in the form given in this github issue. This is just an odd thing you got an LLM to spit out.