Fetching from the wire…
01
02
03
04
05
06
07
08
Security2026-07-24 · source-backed
v2.1.216 fixed worktree-isolated subagents escaping via git -C, --git-dir, or GIT_DIR/GIT_WORK_TREE to reach the shared checkout, plus workflow saves and scheduled-task writes following a .claude symlink outside the project. v2.1.217 fixed background sessions not canonicalizing symlinked working directories. If you run parallel agents in worktrees assuming isolation is a hard boundary, it wasn't. Same class as the trust-boundary flaws disclosed across six coding assistants earlier this month.
Each link below shares sources, entities, or timing with this story.
The changelog shows sandbox filesystem deny entries being bypassed on Linux and macOS: specifically, denyRead: "~/.aws/" written with a trailing slash was silently ignored. That follows the zsh regex bypass, the PreToolUse auto-allow bypass, and the tabs/invisible-Unicode prom...
If you've written Claude Code skills with context: fork in the frontmatter, go check them right now. As of the July 22 release, /code-review runs as a background subagent, and any skill declaring context: fork runs in the background by default (release notes). The opt-out is b...
v2.1.218 took dangerous-rm, background-&, and suspicious-Windows-path checks out of permission dialogs, and stopped prompting in plan mode for Bash the static analyzer can't prove read-only. /deep-research also now starts only when you invoke it. Fewer interrupts, but a model...
Cursor 3 launched on April 2. Not an update. A full rebuild. The editor is now secondary to what they're calling an agent orchestration workspace. You can run unlimited parallel agents, locally or in the cloud, launch them from your phone or Slack or Linear, and manage them in...
The August 7 release adds claude self-hosted-runner so Team/Enterprise customers can host web, mobile and desktop sessions on their own machines or containers, plus cross-session SendMessage/ListAgents so sessions on any of your machines can message each other (macOS and Linux...
Cline released @cline/sdk on May 13, an open-source TypeScript agent runtime that powers their CLI, VS Code, and JetBrains extensions. Running claude-opus-4.7, Cline CLI scores 74.2% on Terminal-Bench 2.0. Claude Code on the same model: 69.4%. Same model. Different harness. Al...
MindPattern daily
One email a day at 7 AM. Sources and a take on every story. Unsubscribe anytime.