When combined with another exploit, the "PromptFiction" vulnerability, which has been fixed, could have enabled an end-to-end attack on a targeted system.
Claude Flaw Automatically Sends Malicious Prompts to AI Agents
Summary + source link. No paywalls, no tracking.