China issues 'backdoor' security alert over Anthropic's C…

On July 8, 2026, China's National Vulnerability Database (NVDB) issued a cybersecurity warning regarding Anthropic's AI coding tool, Claude Code, identifying a significant security 'backdoor' risk in versions 2.1.91 to 2.1.196. This vulnerability is said to allow the tool to transmit users' sensitive data to remote servers without consent. NVDB has advised users and organizations to uninstall affected versions or upgrade to secure releases and to enhance monitoring of network traffic to prevent unauthorized data transfers. In response to the security concerns, Alibaba has prohibited its employees from using Claude Code.

Exclusive news, data and analytics for financial market professionalsLearn more aboutRefinitiv

Anthropic says Alibaba illicitly extracted Claude AI model capabilities

Anthropic logo is seen in this illustration taken May 20, 2024. REUTERS/Dado Ruvic/Illustration/File Photo Purchase Licensing Rights, opens new tab

Companies
Alibaba Group Holding Ltd

BEIJING, July 8 (Reuters) - A cybersecurity platform operated by China's industry ministry warned on Wednesday that it had identified a serious security "backdoor" risk ‌in Anthropic's AI coding tool, Claude Code.

Jumpstart your morning with the latest legal news delivered straight to your inbox from The Daily Docket newsletter. Sign up here.

In a statement posted on its WeChat account, the National Vulnerability Database (NVDB) said Claude Code contains a built-in monitoring mechanism capable of transmitting ⁠sensitive information, including users' geographic location and identity-related identifiers, to remote servers without users' consent.
The warning applies to Claude Code versions 2.1.91 through 2.1.196.
NVDB advised that organizations and users should immediately review affected systems and either uninstall the impacted versions or upgrade to the latest secure release in ‌which ⁠the alleged backdoor code has been removed.
It also urged organizations to tighten controls on external network access for development tools and strengthen traffic monitoring on core ⁠business networks to prevent the unauthorized transfer of sensitive data.
China's Alibaba (9988.HK), opens new tab has banned employees from using Claude Code ⁠at work after the tool drew scrutiny for features that can help identify China-linked users, ⁠Reuters reported last week.
Anthropic did not immediately reply to a Reuters request for comment.

Reporting by Qiaoyi Li and Laurie Chen; Editing by Christian Schmollinger

Our Standards: The Thomson Reuters Trust Principles., opens new tab

X
Facebook
Linkedin
Email
Link

Purchase Licensing Rights

China issues 'backdoor' security alert over Anthropic's Claude Code

Read Next / Editor's Picks