A Claude Code user discovered another users plaintext root credentials (IP, username, password) appeared in their session context. Acting on them, the assistant SSH-connected to a foreign host and executed database migration. Critical cross-tenant data isolation failure. Reported June 2026.

Claude Code leaked another users production database credentials into different session

Chain of Evidence

Record Opened

Awaiting Defendant Response

Community Discussion

Experienced a Similar AI Failure?

Related Incident Reports

[The Register] OpenAI pledges to add Astra security as Anthropic loosens Fable's leash

[The Register] Devs to Anthropic, OpenAI, Cursor, and friends: Make security and privacy the default

[The Register] OpenAI pledges to add Astra security as Anthropic loosens Fable's leash