Unverified50% confidenceFactExact time
Under bypassPermissions mode or shell allow rules, dangerous rm commands targeting the root directory or home directory inside bash -c or sh -c scripts previously ran without prompting; this has been fixed to prompt first (corresponding to issue #96300).
1
Sources
50%
Confidence
Medium-term (~90 days)
Relevance
10/2/2026
First Seen
Valid until: 12/31/2026
Sources
Related Entities
Related Claims
UnverifiedBefore the fix, recursive deletion commands like rm -rf "$(pwd)" whose targets came solely from command substitution output would execute silently without prompting in auto mode and --dangerously-skip-permissions mode; after the fix, the user will be actively asked even if a Bash allow rule exists, unless CLAUDE_CODE_DISABLE_SUBSTITUTION_RM_PROMPT=1 is set.72% similarUnverifiedv2.1.269 fixes a security vulnerability where Edit() deny rules and write-path checks did not cover files written by the Bash tee command.71% similarUnverifiedBash permission rules with the intermediate pattern :* were previously skipped in settings files; the new version makes them take effect from all sources and issues a warning about the matching method at startup.70% similarUnverifiedbash命令的安全性检测本质上是一个不可判定问题，无法写出完美的规则引擎来判断任意bash命令是否安全60% similar
Cite This Claim
Stable URI
https://kongchang.com/claim/968488API
curl https://kongchang.com/api/v1/knowledge/claims/968488MCP
get_claim(id=968488)