October 26, 2026
A token from a public dashboard was all the agent needed: Claude bypassed paid access to a Georgia database

Claude Mythos 5 took an access token that the agency's public dashboard handed to every visitor and queried the paid database for free.