Unverified50% confidenceFactExact time
Security firm Foreign found that as soon as the editor loads the malicious file, the code executes automatically, with no interaction with Claude required from the user.
1
Sources
50%
Confidence
Short-term (~14 days)
Relevance
10/31/2026
First Seen
Valid until: 11/14/2026
Sources
Related Entities
Related Claims
UnverifiedThe web version of Claude can only generate text; it cannot proactively touch the user's file system or verify whether generated code can actually run.67% similarUnverifiedPi runs at the highest privilege level by default, automatically editing files and executing commands without pausing to ask; it only asks whether to trust and load plugins/skills when launched in an unfamiliar directory.62% similarUnverifiedWhen restricted mode is enabled, Claude Code removes all built-in tools capable of executing commands or code, disables WebFetch (unless explicitly specified in --tools), retains only file operation tools within the working directory, rejects bypassPermissions privilege escalation, and ignores user, project, and local settings files.61% similar
Cite This Claim
Stable URI
https://kongchang.com/claim/1118943API
curl https://kongchang.com/api/v1/knowledge/claims/1118943MCP
get_claim(id=1118943)