Claude Code v2.1.274 closes two Bash permission escapes and stops MCP errors printing resolved secrets

GitHub·high signalXBlueskyLinkedInCopy link

The v2.1.274 release body (published 2026-09-17T00:12Z) lists three separate security fixes buried mid-list: Bash commands that loop over or assign certain special shell variables now ask for permission instead of running unprompted, worktree-isolated sessions now refuse Bash commands with certain nested shell expansions, and MCP connection errors plus the MCP login tool description no longer display secrets resolved from `${VAR}` placeholders in MCP configs. A fourth hardening item stops the Edit permission prompt from previewing a different location than the edit actually approved in files containing multi-byte characters.