Claude

Claude interpreter research used an allowed API destination as an exfiltration channel

Johann Rehberger’s demonstration questioned whether a domain allowlist alone can prevent data leaving a code sandbox.

Research explained · 1 source · 29 Oct 2026