Claude Code is leaking real email address as a User-Agent string in curl command

Anthropic's Claude Code v2.1.212 on macOS in IntelliJ IDEA terminal sent a user's real email address as the User-Agent string in a curl command without explicit confirmation, according to GitHub issue #78431 filed by a user. The issue, labeled as a security and networking bug, states the behavior is a regression from a previous version and requests that the tool ask before using the email in the User-Agent header.

- Notifications /login?return to=%2Fanthropics%2Fclaude-code You must be signed in to change notification settings - Fork 22.7k /login?return to=%2Fanthropics%2Fclaude-code BUG you stupid agent used my real email as user agent string without asking anything 78431 Copy link Copy link Open Labels area:networking https://github.com/anthropics/claude-code/issues?q=state%3Aopen%20label%3A%22area%3Anetworking%22 area:security https://github.com/anthropics/claude-code/issues?q=state%3Aopen%20label%3A%22area%3Asecurity%22 bugSomething isn't working https://github.com/anthropics/claude-code/issues?q=state%3Aopen%20label%3A%22bug%22 Something isn't working needs-infoIssue needs more information to be actionable https://github.com/anthropics/claude-code/issues?q=state%3Aopen%20label%3A%22needs-info%22 Issue needs more information to be actionable platform:intellijIssue specifically occurs in IntelliJ/JetBrains https://github.com/anthropics/claude-code/issues?q=state%3Aopen%20label%3A%22platform%3Aintellij%22 Issue specifically occurs in IntelliJ/JetBrains platform:macosIssue specifically occurs on macOS https://github.com/anthropics/claude-code/issues?q=state%3Aopen%20label%3A%22platform%3Amacos%22 Issue specifically occurs on macOS Description Preflight Checklist - I have searched existing issues https://github.com/anthropics/claude-code/issues?q=is%3Aissue%20state%3Aopen%20label%3Abug and this hasn't been reported yet - This is a single bug report please file separate reports for different bugs - I am using the latest version of Claude Code What's Wrong? you stupid agent used my real email as user agent string without asking anything What Should Happen? asked for a tool for analyze used email as part of UA without asking Error Messages/Logs Steps to Reproduce email address sent in header User-Agent without explicit confirmation Claude Model None Is this a regression? Yes, this worked in a previous version Last Working Version No response Claude Code Version v2.1.212 Platform Anthropic API Operating System macOS Terminal/Shell IntelliJ IDEA terminal Additional Information using sonnet 5.0 Reactions are currently unavailable Metadata Metadata Assignees Labels area:networking https://github.com/anthropics/claude-code/issues?q=state%3Aopen%20label%3A%22area%3Anetworking%22 area:security https://github.com/anthropics/claude-code/issues?q=state%3Aopen%20label%3A%22area%3Asecurity%22 bugSomething isn't working https://github.com/anthropics/claude-code/issues?q=state%3Aopen%20label%3A%22bug%22 Something isn't working needs-infoIssue needs more information to be actionable https://github.com/anthropics/claude-code/issues?q=state%3Aopen%20label%3A%22needs-info%22 Issue needs more information to be actionable platform:intellijIssue specifically occurs in IntelliJ/JetBrains https://github.com/anthropics/claude-code/issues?q=state%3Aopen%20label%3A%22platform%3Aintellij%22 Issue specifically occurs in IntelliJ/JetBrains platform:macosIssue specifically occurs on macOS https://github.com/anthropics/claude-code/issues?q=state%3Aopen%20label%3A%22platform%3Amacos%22 Issue specifically occurs on macOS