Claude Code 2.1.232 Patches a PowerShell Permission Bypass and a Windows Symlink Path-Validation Escape
Claude Updates·high signal
Among 2.1.232's 49 changes are three trust-boundary fixes: a PowerShell permission bypass where variable-writing parameters could silently overwrite `$PSDefaultParameterValues`, a Git Bash symlink on Windows that bypassed path validation, and nested Git repositories inheriting trust from their parent directory. The last one matters for anyone running agents over monorepos or vendored submodules — a nested repo you never explicitly trusted was being treated as trusted. Windows-hosted and monorepo agent setups should upgrade rather than wait.