Fetching from the wire…
01
02
03
04
05
06
07
08
Public story · 2026-08-17 · high
A crafted device-prefixed path could reach a remote server and leak login credentials on connect, per the 2.1.233 changelog.
Why now: The fix landed in the 2026-08-17 changelog entry for version 2.1.233.
Claude Code 2.1.233 closes a Windows path bug that could leak NTLM credentials to a remote server on connect, per the changelog. Anyone running Claude Code on Windows at version 2.1.232 or earlier is exposed, and the fix means upgrading to 2.1.233 now.
Paths written with the NT device prefix \??\ bypassed Claude Code's UNC path validation, according to the changelog. That let a crafted path point at a remote SMB server. Windows would then send NTLM credentials to it automatically on connect.
A second bug shipped in the same release, this one in the skills layer. Skill and command arguments were being re-expanded as template markers. That meant a value passed as an argument could get interpreted as an instruction instead of data, an injection-shaped flaw. The changelog groups both fixes together but doesn't say whether either was found through a bug bounty, internal review, or an external report.
The sharper read: a credential leak that fires on connect, with no extra step described in the changelog, is worse than most higher-severity CVEs. Worth watching is whether a later changelog entry discloses how long the \??\ bypass existed, since that answers whether credentials were already exposed before 2.1.233.
Each link below shares sources, entities, or timing with this story.
Claude Code criticizes Windows / Shared entities / Same source / Shared topic / Earlier coverage
Linked by a graph relationship (Claude Code criticizes Windows); both cover Claude Code, Claude Code Changelog, Windows; cite the same source (Claude Code Changelog).
Claude Code criticizes Windows / Shared entities / Shared topic / Earlier coverage
Linked by a graph relationship (Claude Code criticizes Windows); both cover Claude Code, UNC, Windows; overlapping topics (claude, code, device, path, window).
Claude Code criticizes Windows / Shared entities / Same source / Shared topic / Earlier coverage / Tension
Linked by a graph relationship (Claude Code criticizes Windows); both cover Claude Code, Claude Code Changelog; cite the same source (Claude Code Changelog).
Claude Code criticizes Windows / Shared entities / Same source / Shared topic / Earlier coverage
Linked by a graph relationship (Claude Code criticizes Windows); both cover Claude Code, Claude Code Changelog; cite the same source (Claude Code Changelog).
Linked by a graph relationship (Claude Code criticizes Windows); both cover Claude Code, Windows; cite the same source (Claude Code Changelog).
Linked by a graph relationship (Claude Code criticizes Windows); both cover Claude Code, Claude Code Changelog; cite the same source (Claude Code Changelog).
Claude Code criticizes Windows / Shared entities / Same source / Shared topic
Linked by a graph relationship (Claude Code criticizes Windows); both cover Claude Code, Claude Code Changelog; cite the same source (Claude Code Changelog).
Linked by a graph relationship (Claude Code criticizes Windows); both cover Claude Code, Claude Code Changelog; cite the same source (Claude Code Changelog).