Claude Code bypasses safety rule if given too many commands
A hard-coded limit on deny rules drops automatic enforcement for concatenated commands Claude Code will ignore its deny rules, used to block risky actions, if burdened with a sufficiently long chain of subcommands. This vuln leaves the bot open to prompt injection attacks.…
Original Source
Read the full article at Theregister →KhanList aggregates and links to publicly available news content. We do not host full articles from third-party sources. Always verify important information with original sources.