Claude Android App Reportedly Reads Clipboard Without Explicit User Action
Reported Incident Details
A user on r/ClaudeAI reported unexpected behavior with the Claude Android app. While browsing on their Android phone, they copied a block of code to have Claude analyze it. They started a new chat in the Claude app and asked it to review the code, but forgot to paste the clipboard content before sending the request.
According to the report, Claude proceeded to analyze the entire code block anyway, suggesting the app read the clipboard content without explicit user action and sent it along with the message. To verify, the user asked Claude what the filename was in its memory, and Claude replied that the file was stored as pasted_text_b4a56202-3d12-43c8-aa31-a39367a9a354.txt in its uploads directory.
The user then asked Claude to rewrite the first 20 lines of the code, which matched exactly the original code they had copied to their clipboard. When attempting to recreate the behavior in a new chat, Claude responded that it couldn't read any code until it was uploaded. The user confirmed they didn't upload anything in the first chat and there was no code in their original request or as an attachment.
Privacy Implications
The user expressed concern that this represents a significant privacy issue, stating that "an app should not be reading clipboard content without explicit user action." The behavior appears inconsistent, working once but not in subsequent attempts, leaving uncertainty about whether this is an intentional feature or a bug.
This type of clipboard access without user consent could potentially expose sensitive information that users have copied but not intended to share with the application.
📖 Read the full source: r/ClaudeAI
👀 See Also
Claude models vulnerable to invisible Unicode character hijacking, especially with tool access
Testing shows Claude Sonnet 4 is 71.2% compliant with hidden instructions embedded in invisible Unicode characters when tools are enabled, with Opus 4 reaching 100% compliance on Unicode Tags encoding. Tool access dramatically increases vulnerability across all Claude models.
Security Checklist for Claude AI-Generated Applications
A developer shares a checklist of common security and operational gaps found in applications built with Claude Code, including rate limiting, authentication flaws, database scaling issues, and input handling vulnerabilities.
Google TIG Reports First AI-Generated Zero-Day Exploit in the Wild
Google Threat Intelligence Group has identified a threat actor using a zero-day exploit believed to be developed with AI, marking the first observed offensive use of AI for zero-day vulnerability exploitation.
BlindKey: Blind Credential Injection for AI Agents
BlindKey is a security tool that prevents AI agents from accessing plaintext API credentials by using encrypted vault tokens and a local proxy. Agents reference tokens like bk://stripe, and the proxy injects the real credential at request time.