Vibe Coding
Claude Code reverted its 2.1.268 deny-rule check on unanalyzable Bash lines after it denied ordinary builds
2.1.273 explicitly reverts the 2.1.268 change that applied Read and Edit deny rules to Bash lines the permission checker cannot analyze (`eval`, `env -C`); commands like `time -p make build` now prompt again instead of being denied. This is the first rollback in a six-release run of permission-bypass hardening, and it lands in the same release as two more bypass fixes (unanalyzable Bash skipping the prompt under `permissions.blockReadsOutsideWorkingDirectories`, and a subshell hiding a dangerous `rm` in bypass mode). If you pinned to 2.1.268-2.1.272 because of those deny rules, your threat model just changed underneath you.
↳ Follow the thread