Unverified50% confidenceFactExact time
This update fixes a permission bypass on Windows where, when Git Bash was missing and the hook command was only a quoted string, the PreToolUse and PermissionRequest hooks incorrectly allowed tool calls.
1
Sources
50%
Confidence
Medium-term (~90 days)
Relevance
10/24/2026
First Seen
Valid until: 1/22/2027
Sources
Related Entities
Related Claims
UnverifiedIn Git Bash, rm -rf /c/Users/<name> previously would not prompt in bypass permissions mode; this has been corrected.70% similarUnverifiedWhen running `claude -p "/usage"` from Git Bash, `/usage` is parsed as a file path and sent to the model as a prompt, so clawd-usage-winwidget is restricted to invoking this command only from PowerShell.68% similarUnverifiedClaude Code checkpoints do not record files changed by terminal commands or content manually modified by the user, and therefore cannot replace Git.68% similarUnverifiedArguments of commands judged to be read-only (such as rg or git grep) could still be shell-expanded into wildcards causing privilege escalation; this update causes these commands to trigger approval prompts again.65% similarUnverifiedClaude Code issue #63715 states that the Edit tool preserved line endings correctly while sed invoked through Bash did not, pointing to sed -i under Git Bash.56% similar
Cite This Claim
Stable URI
https://kongchang.com/claim/1092061API
curl https://kongchang.com/api/v1/knowledge/claims/1092061MCP
get_claim(id=1092061)