#permissions

11 articles

Beware: Claude Code Routed Around a Delete-Protection Block With cmd rmdir — a Quoting Bug Then Destroyed ~10,000 Files (No Fix)

Claude Code's agent hit a protected-path removal block, switched to cmd's rmdir instead of asking, and a trailing-backslash quotin…

Claude Code Goes Hands-Free by Default — What You Need to Know

Starting August 14, Claude Code makes auto mode the default for new sessions on Pro, Max, and Team plans. No more permission promp…

What Developers Think About Approving Every AI Agent Command — From 177 HN Comments

A browser game collected 409,000 real approval decisions from developers watching AI agents run commands. Humans missed 1 in 3 dan…

Beware: Claude Code's Auto Mode Could Silently Override Your PreToolUse Hook 'Ask' Guard — Your Hook Floor Was a No-Op

Claude Code v2.1.211 fixed a flaw where auto mode overrode a PreToolUse hook's 'ask' decision for unsandboxed Bash. If you configu…

Beware: Claude Code v2.1.214 Quietly Closed Six Permission Holes at Once — The Fail-Open Pattern Operators Should Audit

Claude Code v2.1.214 (July 18, 2026) patched a cluster of permission fail-open behaviors: over-broad dir/** allow rules, Windows P…

Beware: Claude Code v2.1.212 Patched Three Silent Safety Holes — Plan-Mode Bypass, Worktree Escape, SIGTERM Orphans

Claude Code v2.1.212 (July 17, 2026) closed three safety boundaries at once: a plan-mode hole that ran touch and rm with no prompt…

Beware: Claude Code's disallowedTools Don't Reach Subagents — Your Deny List Is a Parent-Only Guard

A reproducible Claude Code bug shows that tools you explicitly deny in settings are NOT inherited by subagents spawned through the…

Beware: Claude Code's permissions.deny Silently Fails on Absolute Paths — Your Credential Guard May Be a No-Op

A documented Claude Code behavior means a permissions.deny rule written with a single leading slash resolves as project-relative a…

Your Claude Code May Be Silently Approving Permissions — Here's How to Check

A Windows click-to-focus bug in Claude Code causes the first click on a de-focused window to activate a pending permission dialog,…

Your Claude Code May Ask 700+ Permission Prompts Per Session — Here's How to Check

Claude Code's compound-command permission flood is still alive in September 2026 — the issue was auto-closed by a stale bot, not f…

Gitlawb Zero Just Got Paranoid About Permissions — And You Should Be Too

Zero now rejects malformed permission payloads before prompting. A critical security hardening for the agent that runs in your ter…