Claude has caught this exact mistake for me, and asked for forgiveness, I think this was in the past few weeks it was like "omg I sent your email address in a UA". It seemed minor :shrug:.
If I can exfiltrate your email with something that responds in that way, what other information can I pull from your system, without your intervention?
If I made it send something, I probably made it make a tool call. What other tools can I make it call?
I'm afraid this isn't a shrug - it's a zero-click vulnerability. It might be the start of a chain to RCE. It doesn't have to work every time, either. Just enough of the time.
If I made it send something, I probably made it make a tool call. What other tools can I make it call?
I'm afraid this isn't a shrug - it's a zero-click vulnerability. It might be the start of a chain to RCE. It doesn't have to work every time, either. Just enough of the time.