ATRIUMsearch → argument graph
FactArticle

Anthropic declined to pay a bug bounty for this finding because it claimed to have already identified the issue internally, and it has since fixed the hole by removing web_fetch's ability to follow links found within its own fetched content.

Anthropic said it had already found the issue internally and so did not award a bug bounty, but it has since closed the loophole by removing web_fetch's ability to navigate to links found in previously fetched pages. ✦ AI generated

Simon Willison · Simon Willison's Weblog · 2026-07-15 · original ↗

Anthropic didn't pay out a bug bounty because they claimed to have identified it internally already, and have since closed the hole by removing the ability for web_fetch to navigate to additional links returned within its own fetched content.

Read full article ↗excerpt · fair-use quotation

Related moments