Claude Discovery

← All discoveries

Close-up of wooden Scrabble tiles spelling SECURITY, symbolizing cybersecurity and protection.
Photo by Markus Winkler on Pexels
tool

Claude Code 2.1.246 Warns You Before Your Wildcard Bash Rule Backfires

2026-08-27 ยท source:

Claude Code 2.1.246 adds a startup warning for Bash allow rules with a wildcard placed before the subcommand, since those rules also match options inserted before it.

What it is

A Claude Code maintenance release addressing permission-rule clarity and terminal rendering, including an Auto mode tab in `/permissions` for viewing and editing auto mode classifier rules.

What it does

It flags Bash allow rules like `Bash(git * main)` at startup because the wildcard also matches options inserted before the subcommand, which could let an unintended command slip through an allow rule the user thought was narrow. It also fixes fullscreen mode showing a blank transcript after a terminal resize and a severe slowdown when a diff contains one very long line.

Why it matters

Permission wildcards that match more than the author expects are exactly the kind of quiet gap that undermines Claude Code's sandboxing, so surfacing the ambiguity at startup instead of leaving it to be discovered the hard way is a real safety fix.

How to use it

Update to 2.1.246 or later; the warning appears automatically at startup if any configured Bash allow rule has a wildcard positioned before the subcommand, and `/permissions` now has an Auto mode tab for reviewing classifier rules.

Go to source →
claude-codesecuritypermissions
Related discoveries
Close-up of a smartphone wrapped in a chain with a padlock, symbolizing strong security.
tool

Claude Code Patches a Bash Permission Bypass in 2.1.223

Claude Code 2.1.223 fixes a Bash permission bypass where a crafted command could hide part of itself from the permission check, and adds owner wildcard entries for marketplace allow and block lists.
Close-up of a smartphone wrapped in a chain with a padlock, symbolizing strong security.
tool

Claude Code 2.1.214 closes a PowerShell permission bypass

Claude Code 2.1.214 fixes four permission-check bugs, including nested-directory allow rules matching too broadly and a bypass in Windows PowerShell 5.1 sessions.
Close-up of wooden Scrabble tiles spelling SECURITY, symbolizing cybersecurity and protection.
tool

gateway.yaml Pricing Now Flows Straight Into Claude Code's /cost

Claude Code 2.1.268 lets administrators set custom rates in gateway.yaml so /cost and telemetry match the organization's actual spend meter, plus a startup warning when a gateway's allowed CIDR list is empty.