Claude Code v2.1.216 Fixes Symlink-Following in Workflow Saves and `/rewind`, Which Redirected Writes Outside the Project
Claude Code Changelog·high signal
Two separate path-traversal fixes shipped in the same release: workflow saves followed a symlink planted at `.claude`, redirecting writes outside the project tree, and `/rewind` followed symlinks and hard links at tracked paths. A hostile or merely careless repo containing a `.claude` symlink could get an agent to write outside its sandbox. This is the same failure class as last week's `dir/**` permission bug — the sandbox is defined by path strings, and the filesystem does not agree.