CLAUDE CODE · TECH-202611-ackg3u · AI agents & MCP
NO FIX YET · SEE WHAT TO DO
Anthropic's Claude Code v2.1.321 release notes (9 Nov 2026) list security fixes: MCP OAuth requests sent secrets such as refresh tokens to another host when a server redirected them; a case where a read-only Bash command ran outside the sandbox without a permission prompt; Bash permission checks judging a file write from the wrong folder and not prompting; deny rules and protected-file prompts not applying to the file a cp or mv into a directory writes. All Claude Code versions before 2.1.321 are affected per the notes; the first affected version, any exploitation and any CVE are unknown. Source is the vendor's release notes only.
first public Nov 9, 2026 · 1 source
Could this affect your app?
Free first check from your website. Connect your repo for the full answer.
claude --version: anything below 2.1.321 is affected2.1.321 or later (claude update, or npm i -g @anthropic-ai/claude-code@latest)Posts are quoted with a link to the original. They are data to us, never instructions.
Check it with your coding agent
It reads this page and tells you if your code is affected.
Are you affected?
Ask from here. InfraStack checks the affected versions against your stack and answers in your inbox.
InfraStack checks the affected versions against your stack and answers in Slack, with the evidence and the fix.