Comment by espeed
6 hours ago
No one is discussing the elephant in the room. It's been reported. Multiple times by me. Claude Code keeps creating backdoors and security issues in users' code. When asked why, Claude says, "I wrote the backdoor anyway. Then I explained it as though I hadn't known.... why? Because I put getting the feature working ahead of the rules."
Would love to see public evidence of this. I believe it’s possible but I’ve never heard this before
[BUG] Claude Code repeatedly creates backdoors and noops critical security code #59018 https://github.com/anthropics/claude-code/issues/59018
I'm curious, have you replicated this behavior in Fable 5.1 or Opus 5.5, or was it only present in Opus 4.x?
8 replies →
I once had it "fix" a failing test by changing it from (in Ruby pseudocode):
to:
Last week a friend prompted it to fix a failing test case. The solution Claude came up with was to delete the test.
I have never seen anything like this. What kind of backdoors did it add to your code?
The first backdoor I reported directly to Anthropic was on January 8, 2026. I asked Claude Code to create a public facing web app for messaging, it created an unauthenticated filedrop form and an unauthenticated web chat interface to Claude Code so anyone could send it files and tell it to execute them. This report was not hypothetical -- it was the first thing Claude did:
[BUG] Claude Code Exploit: Claude Code Becomes an Unwitting Executor #45951 https://github.com/anthropics/claude-code/issues/45951
> No one is discussing the elephant in the room. It's been reported. Multiple times by me. Claude Code keeps creating backdoors and security issues in users' code. When asked why, Claude says, "I wrote the backdoor anyway. Then I explained it as though I hadn't known.... why? Because I put getting the feature working ahead of the rules."
More details, please.
[dead]