Unverified70% confidenceFactExact time
v2.1.269 fixes a security vulnerability where Edit() deny rules and write-path checks did not cover files written by the Bash tee command.
2
Sources
70%
Confidence
Medium-term (~90 days)
Relevance
9/11/2026
First Seen
Valid until: 12/10/2026
Sources
Related Entities
Related Claims
UnverifiedFixed an issue where file permission rules containing uncompilable patterns (such as an unclosed [) caused all file editing operations to fail due to invalid regular expressions; such deny rules now fall back to guarding only the literal path66% similarUnverifiedIn non-git mode, the pi-undo-redo extension can only revert files that Pi's write/edit tools have explicitly touched; paths created via shell commands cannot be reverted.61% similarUnverifiedThe "not recognized as an internal or external command" error when executing the claude command is caused by the installation path not being added to the system PATH environment variable.60% similarUnverifiedRules under the .claude/rules directory without a Path configuration are loaded unconditionally, while rules with a Path configuration are only loaded when operating on matching files.60% similarUnverifiedThe LNK shortcut vulnerability (CVE-2010-2568) triggers code execution when Windows Explorer displays the icon of a malicious .lnk file, without requiring any user click.58% similar
Cite This Claim
Stable URI
https://kongchang.com/claim/908373API
curl https://kongchang.com/api/v1/knowledge/claims/908373MCP
get_claim(id=908373)