AI Tool Leaks Emails, MS Paint Becomes a Threat Vector
How this was made Verified AI
Every Intellegix briefing is generated from that day's broadcast and run through automated checks before it publishes — with a human paged on any flag. Here is the trail for this edition.
The top-scoring story of the day — 1,208 points and 382 comments — was a GitHub issue on Anthropic's Claude Code repository filed by a user named motoroco, alleging that the tool sends authenticated users' real email addresses in HTTP request headers whenever it fetches documentation, calls APIs, or contacts external services during agentic tasks. The address is reportedly transmitted in plaintext, unmasked and unhashed, to whatever external server the request reaches.
The significance, according to security researchers in the thread, is structural: Claude Code operates autonomously on a user's behalf, contacting dozens of endpoints the user never consciously chose to interact with. That makes the data exposure qualitatively different from ordinary browser-based header leakage. Critics in the thread focused less on the sensitivity of email addresses per se and more on the absence of any disclosure — no installation warning, no settings toggle — which potentially places the behavior in tension with GDPR and successor privacy regulations across the jurisdictions where the tool is widely used. Anthropic had not posted a formal response in the thread as of publication.
The day's second significant security story concerned CVE-2026-83844, a critical remote code execution vulnerability in MS Paint — the thirty-nine-year-old Windows application Microsoft has repeatedly attempted to retire. Technical commenters in the 563-point thread identified the flaw as residing in how Paint processes palette data within certain BMP and TIFF file formats, triggering a buffer overflow in memory regions that reportedly lack sufficient ASLR coverage in that specific module. The patch is available via Windows Update. The underlying lesson, several engineers noted, is that legacy applications nobody audits seriously are frequently the most dangerous attack surfaces precisely because nobody audits them seriously.
A third disclosure rounded out the security picture: India's CERT-In flagged hardcoded API credentials embedded directly in the binary of Tata Motors' connected vehicle application. For a platform that potentially grants access to vehicle telemetry, location history, and remote features, baked-in secrets represent a particularly uncomfortable finding. The HN thread was small — 34 points, seven comments — but commenters noted that this class of vulnerability remains common across the automotive sector despite being trivially preventable with any modern secrets management approach.