Fetching from the wire…
01
02
03
04
05
06
07
08
Security2026-07-24 · source-backed
v2.1.216 fixed worktree-isolated subagents escaping via git -C, --git-dir, or GIT_DIR/GIT_WORK_TREE to reach the shared checkout, plus workflow saves and scheduled-task writes following a .claude symlink outside the project. v2.1.217 fixed background sessions not canonicalizing symlinked working directories. If you run parallel agents in worktrees assuming isolation is a hard boundary, it wasn't. Same class as the trust-boundary flaws disclosed across six coding assistants earlier this month.
Each link below shares sources, entities, or timing with this story.
Simon Willison uses Claude Code / Shared entities / Same source / Shared topic / Earlier coverage
Linked by a graph relationship (Simon Willison uses Claude Code); both cover CHANGELOG, Claude Code; cite the same source (v2.1.216).
Claude Code uses LSP / Shared entities / Same source / Shared topic / Earlier coverage
Linked by a graph relationship (Claude Code uses LSP); both cover CHANGELOG, Claude Code; cite the same source (v2.1.216).
Claude Code criticizes Windows / Shared entities / Same source / Shared topic / Tension
Linked by a graph relationship (Claude Code criticizes Windows); both cover CHANGELOG, Claude Code; cite the same source (v2.1.216).
Cline benchmarked against Claude Code / Shared entities / Same source domain / Shared topic / Earlier coverage / Tension
Linked by a graph relationship (Cline benchmarked against Claude Code); both cover Claude Code, Same; reported by the same outlet (github.com).
Cline benchmarked against Claude Code / Shared entities / Same source domain / Shared topic / Earlier coverage
Linked by a graph relationship (Cline benchmarked against Claude Code); both cover Claude Code, Same; reported by the same outlet (github.com).
Claude Code uses MCP / Shared entities / Same source / Shared topic / Earlier coverage
Linked by a graph relationship (Claude Code uses MCP); both cover CHANGELOG, Claude Code; cite the same source (v2.1.216).
Boris Cherny uses Claude Code / Shared entities / Same source domain / Shared topic / Earlier coverage
Linked by a graph relationship (Boris Cherny uses Claude Code); both cover Changelog, Claude Code; reported by the same outlet (github.com).
Anthropic released Claude Code / Shared entities / Same source domain / Shared topic / Earlier coverage
Linked by a graph relationship (Anthropic released Claude Code); both cover Claude Code, Same; reported by the same outlet (github.com).