Unverified50% confidenceFactExact time
Arguments of commands judged to be read-only (such as rg or git grep) could still be shell-expanded into wildcards causing privilege escalation; this update causes these commands to trigger approval prompts again.
1
Sources
50%
Confidence
Medium-term (~90 days)
Relevance
10/6/2026
First Seen
Valid until: 1/4/2027
Sources
Related Entities
Related Claims
UnverifiedBash permission rules with the intermediate pattern :* were previously skipped in settings files; the new version makes them take effect from all sources and issues a warning about the matching method at startup.60% similarUnverifiedBefore the fix, recursive deletion commands like rm -rf "$(pwd)" whose targets came solely from command substitution output would execute silently without prompting in auto mode and --dangerously-skip-permissions mode; after the fix, the user will be actively asked even if a Bash allow rule exists, unless CLAUDE_CODE_DISABLE_SUBSTITUTION_RM_PROMPT=1 is set.57% similarUnverifiedGrok Build's planning mode only allows the agent to read code and write plan files, and changes to the project begin only after user approval.56% similar
Cite This Claim
Stable URI
https://kongchang.com/claim/979335API
curl https://kongchang.com/api/v1/knowledge/claims/979335MCP
get_claim(id=979335)