Anthropic has released Claude Code v2.1.216, introducing a new `sandbox.filesystem.disabled` option that allows users to bypass filesystem isolation while maintaining network control. This update also addresses several security vulnerabilities related to worktree-isolated subagents, symlinked paths, and resumed background agent restrictions. The release emphasizes that disabling filesystem isolation should only be done when an external layer, such as a container or VM, already provides confinement, and recommends a rigorous testing and gradual rollout process for the new version. AI
IMPACT Enhances security for developers using Claude Code, particularly in CI/CD and agent environments.
RANK_REASON This is a product update for a specific tool, not a frontier model release or significant industry event.
Read on dev.to — Claude Code tag →
- 2.1.216
- allowUnsandboxedCommands
- Anthropic
- Bash
- Claude Code
- sandbox.failIfUnavailable
- sandbox.filesystem.allowWrite
- sandbox.filesystem.disabled
AI-generated summary · Google Gemini · from 1 sources. How we write summaries →
