Claude Duet notes connector exposed vault credentials

An AI practitioner discovered that a connected link intended to let an AI assistant read and write notes from a mobile device actually exposed an entire notes vault, which included folders containing credentials and keys for other services. The author found that the server checked only whether a requested file resided within the vault and relied on a secret web address that was repeatedly exposed in log files. The author outlines six checks users can perform before connecting AI assistants to personal data stores to prevent similar exposure. Open article →