permissions
What Claude Code plan mode, auto mode, and bypass mode still allow
Plan mode blocks edits until approval, auto mode classifies risky actions, and bypass still prompts or denies six action classes.
Anthropic published the Claude Code symlink-write CVE; the patch shipped in May 2026
CVE-2026-103435 affects Claude Code before 2.1.129; version 2.1.129 fixed the write race on 2026-05-06, before disclosure on 2026-10-05.
Claude Code 2.1.289 stops a mod from overriding a shell deny rule
Claude Code v2.1.289 blocks mod-approved nested shell commands when deny or ask rules match, and fixes sandbox variable-prefix parsing.
What changed in Claude Code during September 2026?
September 2026 added Opus 5.5, Sonnet 5.5, server-side auto-mode checks, AGENTS.md fallback, and tighter subagent controls.