Claude Code 2.1.321 fixes MCP OAuth redirects that could send secrets, including refresh tokens, to another host. It also fixes cases where Bash commands bypassed permission or sandbox checks, plus gaps in protected-file rules.
Published
Anthropic Claude Code release ↗ · Source dated