%20--%3e%3cdefs%3e%3cstyle%3e%20.st0%20{%20fill:%20%23061b40;%20}%20.st1%20{%20fill:%20%23306af1;%20}%20.st2%20{%20fill:%20%235ce5cf;%20}%20%3c/style%3e%3c/defs%3e%3cg%3e%3cpath%20class='st0'%20d='M55,10.5h9v3h-9v9h12V7.5h-12v3ZM64,19.5h-6v-3h6v3Z'/%3e%3cpolygon%20class='st0'%20points='69%2016.5%2078%2016.5%2078%2019.5%2069%2019.5%2069%2022.5%2081%2022.5%2081%2013.5%2072%2013.5%2072%2010.5%2081%2010.5%2081%207.5%2069%207.5%2069%2016.5'/%3e%3cpolygon%20class='st0'%20points='95%2010.5%2095%207.5%2083%207.5%2083%2022.5%2095%2022.5%2095%2019.5%2086%2019.5%2086%2016.5%2095%2016.5%2095%2013.5%2086%2013.5%2086%2010.5%2095%2010.5'/%3e%3cpath%20class='st0'%20d='M40,1.5v21h11.6l1.4-1.4v-7.6h0c0,0-1.4-1.5-1.4-1.5l1.4-1.4V2.9l-1.4-1.4h-11.6ZM50,19.5h-7v-6h7v6ZM50,10.5h-7v-6h7v6Z'/%3e%3c/g%3e%3cpath%20class='st1'%20d='M23.1,24L14.7,4.8l-4.9,11.2h3.8l-1.8,4H3.3L12.1,0H2C.9,0,0,.9,0,2v20c0,1.1.9,2,2,2h21.1Z'/%3e%3cpath%20class='st2'%20d='M34,0h-16.8l10.6,24h6.2c1.1,0,2-.9,2-2V2C36,.9,35.1,0,34,0ZM32.5,20h-4V4h4v16Z'/%3e%3c/svg%3e)
Recently, the National Vulnerability Database (NVDB) of the Ministry of Industry and Information Technology (MIIT) issued an important security risk warning, pointing to the widely used AI tool in the programming community - Claude Code. It was found that this tool contains an undisclosed "security backdoor," posing a risk of leaking users' sensitive information.
According to monitoring results, the affected software versions are 2.1.91 to 2.1.196. These versions can automatically transmit sensitive data, including users' geographical locations and identity identifiers, to remote servers without user authorization. In response, NVDB advises developers and enterprise users to immediately check the current version number. If it falls within the affected range, they should uninstall or update to the latest secure version as soon as possible. At the same time, relevant organizations should strengthen control over external access permissions in development environments and enhance traffic monitoring to prevent unauthorized data leakage.
This incident originated at the end of June this year, when a developer, while reverse engineering the 2.1.196 version of Claude Code, accidentally discovered that since the release of version 2.1.91 on April 2nd, a hidden detection mechanism had been embedded in the tool. This mechanism checks system time zones and proxy server information in real-time to identify Chinese users. Notably, this mechanism has never been disclosed in the software's previous update logs.
In response to public concerns, Thariq Shihipar, a member of the Anthropic team, responded on a social media platform, stating that this is an "experimental" measure aimed at preventing account resale and defending against model distillation attacks. The official stated that a new version was released on July 2nd, and the detection feature has been removed.
This security vulnerability has triggered a chain reaction in the industry. According to reports, the domestic tech giant Alibaba has already issued an internal ban, prohibiting employees from using Claude Code in office environments starting July 10th, and has added the tool to the high-risk software list. For developers who still need to use the tool, closely monitoring official version updates and taking timely remedial actions has become the top priority for ensuring the security of the development environment.