Claude Code: Sandbox Escape via Git Worktree Path Confusion Allows Unsandboxed Code Execution

Claude Code arbitrary code execution via git worktree commondir trust dialog bypass

Claude Code has a Workspace Trust Dialog Bypass via Repo-Controlled Settings File

Claude Code has a Command Injection in find Command Bypasses User Approval Prompt

Claude Code's startup trust dialog could lead to Command Execution attack

Claude Code IDE extensions allow websocket connections from arbitrary origins

Claude Desktop: Local Privilege Escalation via Directory Junction in CoworkVMService

Claude Code: Plugin Hash Pin Bypass Allows Bypass of Hash Pinning

Claude Code Has Permission Deny Bypass Through Symbolic Links

Claude Code Leaks Data via Malicious Environment Configuration Before Trust Confirmation

Claude Code's Permissive Default Allowlist Enables Unauthorized File Read and Network Exfiltration in Claude Code

Claude Code has a Domain Validation Bypass which Allows Automatic Requests to Attacker-Controlled Domains

Claude Code: Insecure System-Wide Configuration Loading Enables Local Privilege Escalation on Windows