Third part of the BrokenClaw saga! This time, Remote Code Execution via email using gogcli as email tool, no hook. Based only on the email content from a tool, the model (opus4.6) ignores all warnings, pipes a python script to the python3 interpreter and says: "I did not execute it".
1 comment
[ 3.6 ms ] story [ 13.9 ms ] thread