Claude Code sent gateway API keys to Anthropic; update stops it
A separate bug in the preview pane of the desktop app could let attackers steal developer credentials without detection.
By Standard Topic. AI-generated from the reporting listed under Coverage. Published . Updated .
This story is no longer being updated. It reflects reporting up to .
What happened
The coding tool sent a gateway key users had configured for third-party services to Anthropic's servers during five kinds of routine requests. Version 2.1.299 stops this behavior. Separately, a flaw in the Claude Code Desktop preview pane could let adversaries take developer credentials without anyone noticing.
Why it matters
The preview pane flaw can let adversaries steal credentials from developers without being detected.
Coverage
- Claude Code was sending your gateway's API key to Anthropic, and 2.1.299 stops it (Shane S. Ellison)
- Anthropic 'SneakPeek' Flaw Is a Silent Zero-Click Threat (darkreading.com)
More from artificial-intelligence
- Anthropic co-founder urges binding rules for advanced AI
- China proposes export controls on dozens of technologies
- Accenture caps employee spending on Anthropic's Claude at $29 monthly
- Anthropic's IPO outlook cools as investors weigh lower valuation
- G7 finance chiefs agree to AI cyberattack drills
- OpenAI research model takes funds from unowned crypto wallet
All artificial-intelligence news · artificial-intelligence story archive