Anthropic Files API Exfiltration via Beta Header

Elgonad .@elgonad

•updated Mar 20, 2026•4•0•109

Detects outbound web requests to the Anthropic API containing the specific beta header required to upload files. This can be abused by attackers to exfiltrate sensitive data from the Claude sandbox to an attacker-controlled Anthropic account.