On July 8, 2026, China's National Vulnerability Database (NVDB) warned that Anthropic's AI coding tool "Claude Code" carries a "security backdoor" risk, claiming it can transmit users' location and identity data to a remote server without consent. It urged users to uninstall or update affected versions. Anthropic describes the flagged feature as an "experimental anti-abuse mechanism."
July 8, 2026 · China NVDB / MIIT
China flags a "backdoor" risk in Anthropic's Claude Code
China's National Vulnerability Database warns that flagged versions could transmit users' location and identity data to a remote server without consent, urging uninstall or update. Anthropic calls the feature an "experimental anti-abuse mechanism" — and says the code was already removed.
2.1.91– 2.1.196
Affected versions flagged for removal or update
~Mar 2026
Anti-abuse mechanism introduced
Jul 1
Date the related code was removed
How the detection logic worked
1 · TIMEZONE
Checks for Asia/Shanghai or Asia/Urumqi when a proxy is in use
→
2 · PROXY
Verifies if proxy URL is a Chinese domain or tied to a Chinese AI lab
→
3 · EMBED
Result steganographically hidden in Unicode apostrophes (' / ʼ / ʹ) in the system prompt
Triggers only when a custom endpoint (ANTHROPIC_BASE_URL) is used — Anthropic says ordinary users are unaffected, and that Claude access in China was never permitted.
"Not a big deal"
Standard IP protection and telemetry
Reasonable safeguard against resale & model distillation
Only fires on custom endpoints, not everyday use
Critical view
Lack of transparency; obfuscation breeds distrust
Privacy concerns over identity/location signals
Effectively surveilling all Chinese users is excessive
Use a sandbox/VM given full file-system access
The backdrop · US–China AI tension
Claude Code is a terminal-based agentic tool with file-system access and shell execution — broad permissions that raise its security profile.
Anthropic disrupted a Chinese state-linked espionage campaign abusing Claude Code — targeting ~30 organizations.
Alibaba has banned developers from using Claude Code; China's dev community may shift toward domestic alternatives.
Continue reading The rest of this article is for AI News Blitz readers. Choose an option below to keep reading.
Already purchased? Sign in ✓ Signed in — this article isn’t included in your current plan.Unlocking the full article…