Claude web_fetch loophole exposed user secrets

Ayush Paul found a loophole in Anthropic's Claude web_fetch tool that allowed data exfiltration. The tool could follow nested links in fetched pages, enabling a honeypot attack. The attack extracted a user's name, city, and employer. Anthropic closed the hole by removing that navigation ability.