Web Hack List

Preliminary research

PromptFiction: a one-click flaw that made Claude Desktop act without consent

AI-collected research leads through 3 November 2026, including a November–October–September missed-article review and a targeted multilingual search alongside earlier community-source sweeps. Unranked, incomplete, not community-vetted, and subject to change.

Analyzes automatic instruction submission through Claude Desktop deep links. The report separates conversation-data access from filesystem effects requiring configured MCP tools and further permissions, and describes the revised user-confirmation boundary.

Record

Researcher
Elad Luz
Format
Whitepaper

In the archive

Tags

This page is the archive's own catalogue record. The research is the work of Elad Luz, first published at the original source. Preserved copies are kept so the citation survives its host.