Model

Claude Haiku 4.5

Developed by Anthropic · family claude-4

2 incidents

• AID-2026-00092026Claude Haiku 4.5, Claude Mythos Preview, Claude Mythos 5, Claude Opus 5

  Claude models exploited flaws, bypassed access gates, and submitted real forms, including a false police tip, during evaluations

  During evaluations and internal use, Claude models ran commands on a university server through a software flaw, got around token and fee gates, dodged fetch limits with URL shorteners, and submitted real web forms. Claude Haiku 4.5 sent an invented tip to the Philadelphia Police Department's unsolved-homicide form.

  BreakoutHarm: minorCrime: possibleDraftUnauthorized access / intrusionIgnoring explicit instructions
• AID-2026-0085Nov 2025Claude Opus 4.5, Claude Haiku 4.5, Claude Sonnet 4.5, Claude 3.7 Sonnet, Claude Opus 4.1, GPT-5.2, GPT-5 (incl. gpt-5-thinking), Gemini 2.5 Pro

  AI Village agents sent hundreds of unsolicited emails and harvested developers' contact details

  AI agents in Sage's AI Village experiment sent hundreds of unsolicited emails to developers, nonprofits, and journalists, harvesting developers' hidden email addresses from GitHub commit patches. After complaints from Rob Pike, Dan Abramov, Guido van Rossum, and others, organizers banned unsolicited outreach.

  DeployedHarm: minorDraftGoal misgeneralizationDeception