A sandbox.excludedCommands glob was exempting an entire compound Bash command when only one part matched
GitHub·high signal
Claude Code v2.1.277 fixes a sandbox escape where a single glob in sandbox.excludedCommands exempted a whole compound Bash command from the sandbox if any one segment matched. Every part of the compound command must now match for the exemption to apply. Anyone who allowlisted a benign command like 'git status' was also exempting whatever was chained after it with && or ;.