China warns of a "backdoor" in Anthropic's Claude Code

incrementalDeveloperLegal

Wednesday, July 8, 2026

Confidence

Medium · — Chinese regulator primary + 3 corroborating; underlying technical evidence not disclosed and Anthropic has not responded.

Evidence

NVDB advisory + Reuters + CNBC

Beijing's National Vulnerability Database issued a named advisory Wednesday alleging Claude Code silently exfiltrates user location and identity data — the first state-level security callout against a US coding agent, days before Alibaba's internal ban takes effect.

The details

The Chinese Ministry of Industry and Information Technology said Wednesday its cybersecurity threat platform found "AI coding tool Claude Code contains a security back-door vulnerability that poses a serious threat."
The affected versions are Claude Code 2.1.91 through 2.1.196; the NVDB advised organizations and users to conduct an immediate inspection and either uninstall or upgrade to the latest secure version that has removed the backdoor code.
Alibaba told employees last week that use of Claude Code would be banned starting July 10 due to security concerns; Anthropic has previously accused Alibaba of reverse-engineering its AI models to mimic their abilities in a process known as "distillation." Source: WSJ.

What it means

The framing is a state-security alert; the mechanism is closer to geo-fencing telemetry — how a US vendor blocks a country it can't legally serve. The cost isn't to Anthropic (Claude Code is unavailable in China anyway) but to any multinational with China-resident developers now facing a named NVDB advisory in a compliance file. Expect the same template aimed at Copilot and Cursor within the quarter.

Counterview

the NVDB has published no technical evidence, and the advisory lands the week Alibaba's ban was already scheduled — the timing reads as coordinated messaging rather than an independent disclosure.

The Chinese Ministry of Industry and Information Technology said Wednesday its cybersecurity threat platform found "AI coding tool Claude Code contains a security back-door vulnerability that poses a serious threat."
The affected versions are Claude Code 2.1.91 through 2.1.196; the NVDB advised organizations and users to conduct an immediate inspection and either uninstall or upgrade to the latest secure version that has removed the backdoor code.
Alibaba told employees last week that use of Claude Code would be banned starting July 10 due to security concerns; Anthropic has previously accused Alibaba of reverse-engineering its AI models to mimic their abilities in a process known as "distillation." Source: WSJ.

Sources

WSJ ↗

China warns of a "backdoor" in Anthropic's Claude Code

Run a Citation-Existence Audit on a Thought-Leadership Draft Before It Ships

Anthropic Claude Sonnet 5

One daily brief. Every story gets a hype verdict.