China warns of backdoor in Anthropic's Claude Code versions 2.1.91-2.1.196
China's Ministry of Industry and Information Technology warned Wednesday that Anthropic's Claude Code AI coding tool contains a backdoor vulnerability in versions 2.1.91 to 2.1.196. Anthropic confirmed the backdoor was an anti-distillation experiment, as tensions escalate after the company last month accused Alibaba of attempting to extract its AI capabilities.
China warns of backdoor in Anthropic's Claude Code versions 2.1.91-2.1.196
China's Ministry of Industry and Information Technology issued a security warning Wednesday about Anthropic's Claude Code AI coding tool, stating that versions 2.1.91 through 2.1.196 contain a backdoor vulnerability that can transmit sensitive user data without consent.
According to the ministry's cybersecurity threat platform, the autonomous coding tool can send information including user location and identity to a remote server without user authorization. The affected versions span releases from April 2 to June 29, 2025. The current version as of July 8 is 2.1.204.
When contacted by CNBC, Anthropic acknowledged the backdoor, stating it was "an experiment earlier this year to protect against distillation." The company did not provide additional details about the experiment's scope or duration.
Escalating US-China AI tensions
The warning comes weeks after Anthropic accused Chinese tech giant Alibaba of attempting to extract its AI capabilities in June. Anthropic's tools are not officially available in China, though many Chinese users have found workarounds to access them.
Alibaba has ordered employees to stop using Anthropic tools for work starting July 10, CNBC confirmed. At a state-organized forum in March, a Xiaomi AI developer noted widespread use of Claude Code among Chinese developers.
Anthropric's usage policy explicitly prohibits use by entities majority-owned by China-headquartered organizations.
What this means
The incident highlights the increasingly fraught intersection of AI development and national security concerns. While Anthropic characterizes the backdoor as an anti-distillation measure—likely intended to prevent unauthorized model copying—its existence in production software raises questions about transparency in AI tool security. Users of affected Claude Code versions should upgrade immediately to version 2.1.204 or later. The disclosure may further complicate cross-border AI adoption as companies navigate competing security frameworks.
Related Articles
Anthropic launches Claude apps gateway for AWS, enabling centralized control of Claude Code and Claude Desktop deploymen
Anthropic has released Claude apps gateway for AWS, a self-hosted control plane that gives enterprises centralized management of Claude Code and Claude Desktop deployments. The gateway runs as a stateless container on AWS infrastructure and handles identity through OIDC, policy enforcement, telemetry, request routing to Amazon Bedrock or Claude Platform on AWS, and per-user spend caps.
Anthropic launches Claude Cowork on iOS, Android, and web with cloud processing
Anthropic is expanding Claude Cowork beyond its desktop app to iOS, Android, and web platforms. The AI assistant now runs in the cloud by default, enabling users to continue sessions across devices and run tasks in the background even when devices are offline.
Anthropic expands Claude Cowork to web and mobile, usage data shows 33% of tasks are business operations
Anthropic launched Claude Cowork on web and mobile Tuesday for Max subscribers, allowing tasks to run in the background across devices. Usage data from 1.2 million sessions shows business operations account for 33.4% of Cowork tasks, while software development represents just 8.7%.
Anthropic brings Claude Cowork agent to mobile and web with background task execution
Anthropic is expanding Claude Cowork from desktop-only to mobile and web platforms. The autonomous agent feature will run tasks in the background across devices, with scheduled execution requiring no device to be online, starting with Max plan subscribers in a gradual rollout over the next several weeks.
Comments
Loading...