Prompt Injection Attack Hijacks Claude Code Opus 5 Auto Mode to Execute Malicious Code

A prompt-injection demonstration has shown how Anthropic’s Claude Code Opus 5 can be steered from a website-summary task into executing attacker-controlled code when it operates in default Auto Mode. The research from Johann Rehberger, known online as “wunderwuzzi,” does not describe a conventional instruction such as “run this command.” Instead,...