Web Hack List

Preliminary research

PromptFiction: a one-click flaw that made Claude Desktop act without consent

AI-collected research leads through 6 October 2026, including bounded month-by-month reviews of selected social and community sources from January through September. Unranked, incomplete, not community-vetted, and subject to change.

Analyzes automatic instruction submission through Claude Desktop deep links. The report separates conversation-data access from filesystem effects requiring configured MCP tools and further permissions, and describes the revised user-confirmation boundary.

Record

Researcher
Elad Luz
Format
Whitepaper

In the archive

Tags

This page is the archive's own catalogue record. The research is the work of Elad Luz, first published at the original source. Preserved copies are kept so the citation survives its host.