2.1.289: Security, stability, and rendering fixes
This release fixes multiple security vulnerabilities including unauthorized approval bypass for managed mods, plugin permission bypasses, and MCP server description rewriting. It also addresses terminal freezes with malformed script tags, file access denial rule bypasses via symlinks, authentication regression, and numerous plugin/mod rendering and session stability issues.
- Fixed a deny or ask rule on a nested part of a compound shell command not holding over a user-installed mod's approval on managed machines
- Fixed the terminal freezing on short code blocks with many unclosed
<script>tags or deeply nested${substitutions - Fixed
Readdeny rules not applying to files @-mentioned, changed, or selected in the IDE through a symlink - [VSCode] Reverted a 2.1.288 change to
claude auth statusthat may have made sign-outs more frequent - Improved how quickly large files open in a plugin code pane by laying the highlighted view out once at its final width
- Fixed
plugin list,plugin evalandplugin updateshowing a stale copy of a plugin installed from a local folder marketplace, and hot reload for a symlinked--plugin-dir - Fixed installed mods not loading in the first session after an upgrade
- Fixed a plugin's rows above the prompt showing a stale row while the Background tasks dialog was open in fullscreen
- Fixed plugin panes drawing nothing when a link used a localhost address, an
@in its path, an uppercase host or afile:path - Fixed a user-installed plugin being able to rewrite the descriptions of an organization-managed MCP server's sign-in tools
- Fixed a freeze or forced quit at launch when a plugin drew a Box with a border style the terminal does not know
- Fixed supervised and background sessions ending when a plugin's on-screen handler threw asynchronously
- Fixed sessions ending with an interface error when a plugin region with no height kept growing
- Fixed Bash deny and ask rules missing a command behind an environment variable prefix with an expanded value (e.g.
TZ="$HOME" rm -rf build) when the sandbox auto-allows commands - Fixed a Bash deny or ask rule being skipped under sandbox auto-allow when a bare variable assignment came before the command
- Fixed
claude plugin validateskipping the plugin when the folder also holds a marketplace manifest - Added
agent.spawnfor teammates, one agent id across plugin hook events, and idle and waiting states in$.agent.list() - Fixed sessions ending with "unrecoverable interface error" when a value a mod's
ui.renderhook wrote made a row throw while drawn; the engine now draws its own row instead - Fixed text with a tab, a stray escape and a C1 control, or a short text with a tab and CRLF line endings, drawing over the rows below it
- Fixed right-aligned content in a mod's pane or band drawing under the close mark or
[-], which now also keep one column in from the terminal's edge - Fixed a mod's
Clientthat fails while drawn taking down everything the mod drew around it; it now fails alone and raisesui.fault - Fixed
claude plugin validatefailing an Anthropic marketplace's own plugin and listing a cleanplugin.jsonin--json - Fixed a mod's band that fails to draw briefly telling the cards under it to step aside
- Fixed a failed plugin component showing
Erroror nothing as its reason when the failure carried no message - Improved the line a mod's author sees when its band or pane fails to draw: it names the mod and says nothing was drawn
- Fixed published artifact pages freezing or crashing the reader's browser tab on short code blocks with many unclosed
<script>tags - Fixed a mod's Client region staying failed for the whole session after the terminal threw while drawing it
Source: original entry ↗
More from Claude Code
Follow Claude Code to get its new changes in your feed and email digest.
Claude Code 2.1.296
This release adds new configuration options for managed policies, subagent behavior, workflow models, and retry handling. It includes improvements to the Claude apps gateway, Desktop Code tab settings, file reading capabilities, and session management across cloud and self-hosted environments. Pricing for Sonnet 5.5 cache reads has been updated to $0.10 per million tokens, and various UI and behavior refinements have been made to Claude Tag, VSCode, Chrome, and Slack integrations.
Claude Code 2.1.295 Release
This release adds onFailure blocking for hooks, Program Status Protocol support for terminal status display, upstream timeout configuration, improved tool descriptions, and numerous UX enhancements including file handling in chat, better error messages, and protocol improvements across VSCode, Claude Tag, and MCP integrations.
Claude Code 2.1.287
Claude Code 2.1.287 introduces Claude Mods for deeper plugin behavior customization, adds the "You should know" built-in mod for monitoring, and brings URL prompts from MCP servers, improved filtering in the agents view, and numerous UX enhancements. The update also includes support for 1M context windows, background shell execution in VSCode, and security improvements for file operations.