Fetching from the wire…
Security2026-08-15 · source-backed
Released August 15, v2.1.233 fixes Windows paths written with the NT device prefix \??\ slipping past UNC path validation. It follows the Git Bash Cygwin-symlink bypass and the PowerShell variable-writing parameter bypass in 2.1.232. The same release stops nested git repositories from inheriting trust from a parent directory. Claude Code Releases Three distinct escapes in eight days on one platform is a pattern, not bad luck. Path validation on Windows has too many spellings for the same file, and allowlists keep losing to that. If you run Claude Code on Windows with allowlist-based permissions, treat anything before 2.1.233 as leaky and upgrade today.
Each link below shares sources, entities, or timing with this story.
Claude Code supports PowerShell / Shared entities / Same source domain / Shared topic / Earlier coverage
Linked by a graph relationship (Claude Code supports PowerShell); both cover Claude Code, PowerShell, Windows; reported by the same outlet (github.com).
Claude Code supports PowerShell / Shared entities / Same source domain / Shared topic / Earlier coverage / Tension
Linked by a graph relationship (Claude Code supports PowerShell); both cover Claude Code, Windows; reported by the same outlet (github.com).
Claude Code supports PowerShell / Shared entities / Same source / Shared topic
Linked by a graph relationship (Claude Code supports PowerShell); both cover Claude Code, Claude Code Releases; cite the same source (Claude Code Releases).
Claude Code supports PowerShell / Shared entities / Same source domain / Shared topic / Earlier coverage
Linked by a graph relationship (Claude Code supports PowerShell); both cover Claude Code, PowerShell; reported by the same outlet (github.com).
Claude Code supports PowerShell / Shared entities / Shared topic / Earlier coverage
Linked by a graph relationship (Claude Code supports PowerShell); both cover Claude Code, PowerShell, Windows; overlapping topics (claude, code).
Claude Code supports PowerShell / Shared entity: Claude Code / Same source domain / Shared topic / Earlier coverage / Tension
Linked by a graph relationship (Claude Code supports PowerShell); both cover Claude Code; reported by the same outlet (github.com).
Claude Code supports PowerShell / Shared entities / Same source domain / Shared topic / Earlier coverage
Linked by a graph relationship (Claude Code supports PowerShell); both cover Claude Code, Windows; reported by the same outlet (github.com).
Linked by a graph relationship (Claude Code supports PowerShell); both cover Claude Code, Windows; reported by the same outlet (github.com).