Fetching from the wire…
01
02
03
04
05
06
07
08
Security2026-08-15 · source-backed
Released August 15, v2.1.233 fixes Windows paths written with the NT device prefix \??\ slipping past UNC path validation. It follows the Git Bash Cygwin-symlink bypass and the PowerShell variable-writing parameter bypass in 2.1.232. The same release stops nested git repositories from inheriting trust from a parent directory. Claude Code Releases Three distinct escapes in eight days on one platform is a pattern, not bad luck. Path validation on Windows has too many spellings for the same file, and allowlists keep losing to that. If you run Claude Code on Windows with allowlist-based permissions, treat anything before 2.1.233 as leaky and upgrade today.
Each link below shares sources, entities, or timing with this story.
One Claude Code release fixed two independent permission-check bypasses on the same day. That's the story. Version 2.1.221, shipped August 4, patches a Bash tool bypass where zsh could execute hidden commands embedded inside [[ ]] regex conditionals. The approval prompt never...
Windows paths spelled with the NT device prefix bypassed the UNC path validation, so a crafted path could reach a remote SMB host and leak NTLM credentials on connect (Claude Code Changelog). The same release fixed skill and command argument substitution so argument values are...
v2.1.218 took dangerous-rm, background-&, and suspicious-Windows-path checks out of permission dialogs, and stopped prompting in plan mode for Bash the static analyzer can't prove read-only. /deep-research also now starts only when you invoke it. Fewer interrupts, but a model...
Agent-created schedules move from per-chat folders to ~/.cline/schedules, and cron reconciliation on restart no longer wipes hub-managed schedules (GitHub). Tool results returning images from browser or MCP tools render inline with a carousel instead of raw base64 text, which...
Buried in the 2.1.233 notes. The harness is removing explicit planning scaffolding for the newer tier while keeping it for older models, betting these models track multi-step work internally and that a forced todo list burns tokens without improving completion. Claude Code Rel...
zhaoxuya520/reverse-skill (17,131 total, 2,376 forks) is a PowerShell skill-router pack for reverse engineering and authorized pentesting, doing AI-powered routing, bootstrapping its toolchain on demand, and maintaining a self-evolving knowledge base across Claude Code, Kiro,...
MindPattern daily
One email a day at 7 AM. Sources and a take on every story. Unsubscribe anytime.