# Live news

Canonical: https://ournews.ai/live/36dcdbd5-a6cb-4a92-b145-6d91775bdad4
Published: 2026-11-09T19:34:42.342389+00:00
Updated: 2026-11-09T19:34:42.342389+00:00

Claude Code 2.1.321 fixes MCP OAuth redirects that could send secrets, including refresh tokens, to another host. It also fixes cases where Bash commands bypassed permission or sandbox checks, plus gaps in protected-file rules.

Source: Anthropic Claude Code release — https://github.com/anthropics/claude-code/releases/tag/v2.1.321
Source date: 2026-11-09