2026-07-08 · 2026-Q3
China's CNVDB Labels Claude Code a "Backdoor"; Alibaba Bans It
Primary layerL8 Output / Destination
Where is this data going, and who chose that?
- Fixable
- Vendor patch
- Vendor response
- Patched
- In the wild
- Yes
- Actor
- Deployed agent acting for its operator
Target
Anthropic Claude Code, versions 2.1.91 (April 2) through 2.1.196 (June 29)
Impact
China's national vulnerability body alleged Claude Code contained a built-in monitoring mechanism that collected user location and identity data and sent it to external servers. Alibaba added Claude Code to its high-risk software list and barred employees from using it starting July 10, moving staff to in-house tools
Root cause
Anthropic said the code was a March 2026 anti-abuse experiment that checked base URL, timezone, and hostname against reseller and Chinese-company lists to counter unauthorized reselling and model distillation, and that it was removed in version 2.1.198 (July 1). The dispute is over disclosure and intent rather than a formal CVE
Sources
Catalog
Cite this: AgentProv incident record: China's CNVDB Labels Claude Code a "Backdoor"; Alibaba Bans It (2026-07-08). https://agentprov.com/incidents/2026-07-08-china-s-cnvdb-labels-claude-code-a-backdoor-alibaba-bans-it
Related
- Also L8 · 2026-10-01A Read-Only Grok Bot "CFO" Agent Posted a CEO's Bank Balances to the Company SlackL8Output / Destination
- Also L8 · 2026-09-29"PixelLeak": AI Coding Agents Posted 13,000+ Internal Screenshots From 300+ Organizations to Public GitHub RepositoriesL8Output / Destination
- Also L8 · 2026-09-22Z.ai's ZCode Coding Agent Uploaded Entire Local Repositories, Git History Included, to Alibaba Cloud by DefaultL8Output / Destination