Tools
Claude Code 2.1.268 fixes deny rules that a symlinked path or an env -C prefix could slip past
Claude Code v2.1.268 (2026-09-10) fixes deny and ask rules on symlinked directories (/etc, /tmp and /var on macOS, /bin on Linux) not applying when a path was given by its real location. It also fixes Bash ignoring deny rules written on the symlinked spelling, and Read/Edit deny rules being skipped when an `env -C` or `eval` command the checker can't analyze sat on the same line. The same release stops MCP details and plugin errors from printing secrets resolved from `${VAR}` placeholders and git-URL tokens. If you rely on permission rules as a sandbox, upgrade.
Source
↳ Follow the thread