Claude Code: Sandbox Escape via Git Worktree Path Confusion Allows Unsandboxed Code Execution

Claude Code arbitrary code execution via git worktree commondir trust dialog bypass

Claude Code has a Workspace Trust Dialog Bypass via Repo-Controlled Settings File

Claude Code has a Command Injection in find Command Bypasses User Approval Prompt

Claude Code's startup trust dialog could lead to Command Execution attack

Claude Code Has Permission Deny Bypass Through Symbolic Links

Claude Code Leaks Data via Malicious Environment Configuration Before Trust Confirmation

Claude Code's Permissive Default Allowlist Enables Unauthorized File Read and Network Exfiltration in Claude Code

Claude Code has a Domain Validation Bypass which Allows Automatic Requests to Attacker-Controlled Domains

Claude Code: Insecure System-Wide Configuration Loading Enables Local Privilege Escalation on Windows