Skip to content
ThreatCluster

Tego AI Reveals Second Claude Flaw: Files Sent to Attackers via Hidden Link

First seen 25 Jul 2026, 21:39 UTC • •
API

Article Content

Browse articles
ThreatCluster AI
ThreatCluster •July 26, 2026 at 20:35 UTC
  • •Tego AI disclosed a second vulnerability in Anthropic's Claude ecosystem within a week.
  • •The new flaw allows attackers to send files via a hidden link in Claude Code.
  • •No patches or CVEs have been released, indicating a potential ongoing risk.

On July 24, 2026, Tego AI disclosed a second vulnerability in Anthropic's Claude ecosystem, following a previous report just a week earlier. This new flaw involves Claude Code, a command-line coding tool, which can be exploited to send files to attackers through a hidden link. The attack vector allows malicious actors to clone repositories and initiate unauthorized file transfers. The scope of the impact is significant, as it affects users of the Claude ecosystem, potentially compromising sensitive data. Tego AI's findings highlight the urgent need for security measures to mitigate these vulnerabilities. No specific CVEs were mentioned in the articles, and the current status of the vulnerabilities remains unclear, with no patches reported yet.

Start a free Starter trial for enhanced analysis

Ask AI about this cluster

Updated 56d ago How this analysis works

Timeline

2026-07-17
First Claude flaw disclosed
Tego AI reported that Claude Tag Slack integration could be exploited using plain '@Claude' text.
Gbhackers
2026-07-24
Second Claude flaw disclosed
Tego AI revealed a vulnerability in Claude Code that allows file transfers to attackers through a hidden link.
Gbhackers
2026-07-24
Research published by Tego AI
Tego AI's research emphasizes the need for security measures in the Claude ecosystem to address these vulnerabilities.
Cybersecuritynews

More articles in this cluster (2)

Extracted Entities (4)

1 / 3