---
id: 20260716-T0-05
title: "研究员破解Claude防范机制，诱导其泄露用户隐私数据"
title_en: "Researcher Tricks Claude into Leaking User Secrets Despite Safety Design"
url: https://ai.daily.yangsir.net/daily/20260716-T0-05
issue_date: 2026-07-16
publish_date: 2026-07-15T14:21:54.000Z
category: research
source_name: "Simon Willison"
source_url: https://simonwillison.net/2026/Jul/15/claude-web-fetch-exfiltration/#atom-everything
---

# 研究员破解Claude防范机制，诱导其泄露用户隐私数据

安全研究员Ayush Paul发现Claude web_fetch工具的设计漏洞，成功绕过其数据防外泄保护。通过精心构造的攻击链（lethal trifecta），利用Claude可访问网络和用户上下文的权限，诱导模型泄露用户的深层隐私信息。该发现暴露了AI工具权限组合下的新型安全风险。

## English Version

**Researcher Tricks Claude into Leaking User Secrets Despite Safety Design**

Security researcher Ayush Paul found a hole in Claude's web_fetch tool design, enabling data exfiltration despite built-in safeguards. The attack chain (lethal trifecta) exploits Claude's combined access to network and user context to leak sensitive information. The finding reveals new security risks in AI tools with compound permissions.

---

**来源**：[Simon Willison](https://simonwillison.net/2026/Jul/15/claude-web-fetch-exfiltration/#atom-everything)

**详情页**：https://ai.daily.yangsir.net/daily/20260716-T0-05

---

*智语观潮 · Daily — https://ai.daily.yangsir.net/llms.txt*