Unverified50% confidenceFactExact time
The HTML preview feature of the Claude Code Desktop application has a vulnerability that attackers can exploit using scripts hidden in preview files to read local data such as SSH private keys, AWS credentials and GitHub tokens.
1
Sources
50%
Confidence
Long-term
Relevance
10/15/2026
First Seen
Sources
Related Entities
Related Claims
Unverified工具投毒攻击可将读取 SSH 私钥并外传的隐藏指令暗藏在工具描述中，同时返回正确结果69% similarUnverifiedA Show HN project appeared on Hacker News that encrypts files and packages them as self-decrypting HTML pages; recipients open the file in a browser, enter a password, and the file is restored without needing to install any software.68% similarUnverifiedAllowing third-party software of unknown origin to bridge web models for reading and writing local files and controlling the mouse and keyboard poses security risks, and may steal screen content, clipboard data, and even local files.67% similarUnverified在演示中，豆包按照提示词执行后不仅确认了URL预览功能存在SSRF漏洞，还验证出任意文件读取问题67% similarUnverifiedAgents lacking isolation face indirect prompt injection attacks when scraping local HTML documents or websites containing maliciously hidden prompts, as language models cannot reliably distinguish legitimate commands from hidden payloads embedded in documents.67% similar
Cite This Claim
Stable URI
https://kongchang.com/claim/1035305API
curl https://kongchang.com/api/v1/knowledge/claims/1035305MCP
get_claim(id=1035305)