anthropics/claude-code v2.1.214

Anthropic Patches Critical Security Vulnerabilities in Claude Code v2.1.214

TL;DR

• Security hardening: Anthropic addressed multiple permission-check bypasses that could allow unauthorized command execution in Claude Code's autonomous operations
• Cross-platform impact: Fixes target Windows PowerShell, Bash, and remote session vulnerabilities that affected permission validation systems
• Immediate deployment: The patch (v2.1.214) is now available on GitHub for users relying on Claude Code for development tasks

What happened

Anthropic released Claude Code v2.1.214 with a substantial security update focused on tightening permission-checking mechanisms that govern which commands the AI can execute autonomously. The release addresses seven distinct vulnerabilities spanning multiple operating systems and shell environments.

The most critical fixes involve permission bypass exploits affecting Windows PowerShell 5.1 sessions and Bash command interpretation. Anthropic discovered that certain file-descriptor redirects and variable subscripts in conditional statements were being misclassified as benign, potentially allowing unsafe command execution without user approval. A particularly concerning issue involved the system auto-approving lengthy help and man commands that could execute dangerous options or command substitutions through backslash paths.

Additional patches correct overly-permissive wildcard matching in directory rules—a flaw that allowed Edit(src/**) patterns to approve writes to nested directories anywhere in the system tree rather than only within the current working directory. The update also addresses timing vulnerabilities in remote session permission prompts that could proceed before local confirmation dialogs were acknowledged.

The fixes represent Anthropic's response to edge cases where Claude Code's permission sandbox—designed to prevent unauthorized file modifications and system commands—could be circumvented through shell-specific syntax parsing differences or logical gaps in rule matching.

What happens next

Users should update to v2.1.214 immediately, particularly those operating Claude Code in automated CI/CD pipelines or multi-user environments. The patches are available now via the Anthropic GitHub releases page. Organizations using remote development sessions over SSH should prioritize deployment to close the permission-prompt timing vulnerability. This article does not contain affiliate links.