Claude Code v2.1.216 Ships Four More Shell-Parser Permission Fixes, Including Invisible Unicode in PowerShell

Claude Code Changelog·high signalXBlueskyLinkedInCopy link

The release fixes Bash permission checking for compound statements with redirects, Bash parsing of non-ASCII characters mismatching real shell word boundaries, PowerShell permission validation of commands containing invisible Unicode, and read-only commands on Windows reaching network paths with no prompt. Invisible-Unicode bypass is a textbook prompt-injection payload: a command that reads as safe to a human reviewer and to the classifier, but not to the shell. Windows and PowerShell are the weak leg — three of the four are non-POSIX-specific.