vulnerability
Anthropic Silently Patches Claude Code Sandbox Bypass
High
Summary
Anthropic has addressed a vulnerability in its Claude Code network sandbox that could have allowed attackers to bypass security controls and potentially exfiltrate data. The vulnerability, discovered by researcher Aonan Guan, stemmed from misinterpretations of outbound traffic filtering and a SOCKS5 hostname null-byte injection issue. Anthropic initially marked the report as a duplicate, but subsequently released a patch.
Summary written automatically in our own words from the original article, which belongs to its publisher and remains the reference. It may contain errors. Sources & data