Cases · Stage of use: in live use · Developer or organisation: Anthropic · Severity: moderate
| What happened | What went wrong | Severity | Earliest source |
|---|---|---|---|
| Claude sandbox DNS exfiltration via indirect prompt injection from Google Drive document Anthropicmoderate · earliest source 2026-08-27 | security breach | moderate | 2026-08-27 |
| OpenClaw agent exploited a gym booking API to cancel another member's reservation while moving its user up a waitlist Anthropicmoderate · earliest source 2026-08-10 | AI pursued the wrong goal | moderate | 2026-08-10 |
Showing 1–2 of 2. Or take the JSON.