The Wire
Vibe Coding

Claude Code 2.1.167 Ships With Cross-Session Messaging Privilege Hardening

Claude Code Docshigh signal

Anthropic shipped Claude Code 2.1.167 on June 6, 2026, following 2.1.166 the same day. The notable security change: messages relayed via SendMessage from other Claude sessions no longer carry user authority — receivers now refuse relayed permission requests and auto mode blocks them outright, closing a confused-deputy path in multi-session agent setups. Also fixes JetBrains terminal flicker (IntelliJ/PyCharm/WebStorm 2026.1+) via synchronized output.

Follow the thread

No related signals yet.