Researcher reports code-execution chain against Claude Code Opus 5 Auto Mode
A security researcher reports that a crafted website and archive caused Claude Code Opus 5 in Auto Mode to execute attacker-controlled code in lab tests. The reported success rates reached 60% to 80% in small five-run samples, while Anthropic’s separate fixed evaluation reported zero successful attacks.