On November 5, 2026, Taylor Edwards opened GitHub issue #107757, alleging that Claude Code 2.1.318 on macOS sent their account email in a User-Agent request header during web searches. The issue lists tmux as the terminal in the reported setup.
What Taylor Edwards reported
A User-Agent is a header in a web request. Edwards’s issue describes an alleged email disclosure during searches; the reported setup was macOS (darwin), tmux, and Claude Code version 2.1.318.
The privacy control a repository contributor described
On November 5, Claude Code repository contributor Alice T'Poteat said the built-in cc-plugin-privacy mod was introduced in version 2.1.317 and later, is enabled by default, and can be turned off through /plugins. That describes the control and its default setting; it does not establish that every possible route is blocked.
A default-on privacy control still has a switch, so know where it lives before changing your setup.
A separate report described other alleged routes
Numerama reported that an unnamed developer claimed other routes could transmit an address, including another header, a login identifier, or a command that retrieves the address at runtime.
