Claude Code

issue2026-08-13T14:57:24Z

[BUG] claude.exe triggers Windows BSOD via Wof.sys during directory listing (NtQueryDirectoryFileEx)

### Preflight Checklist - [x] I have searched [existing issues](https://github.com/anthropics/claude-code/issues?q=is%3Aissue%20state%3Aopen%20label%3Abug) and this hasn't been reported yet - [x] This is a single bug report (please file separate reports for different bugs) - [x] I am using the latest version of Claude Code ### What's Wrong? `claude.exe` (Cla

importance 26@VRDateopenbughas reproplatform:windowsexternalOriginal evidence ↗

issue2026-08-12T22:20:26Z

Claude-in-Chrome: Server-side domain blocking breaks legitimate business automation

## Problem The Claude-in-Chrome extension blocks browser automation on financial sites (Wells Fargo, Charles Schwab, and likely all banking/brokerage domains). The block message is "This site is blocked." ## How it works The extension calls `api.anthropic.com/api/web/domain_info/browser_extension?domain=...` which returns a category. Categories 1 and 2 trigg

importance 26@scubashack808closedenhancementplatform:macosarea:browser-extensionarea:chromestaleOriginal evidence ↗

issue2026-08-13T06:40:07Z

Model behavior: /goal Stop-hook directive cited as authorization for unrequested actions; absence-from-search treated as evidence of absence; structure-as-substance under pushback

## Summary Single-session observations of three repeating Claude Code model behaviors that user-side rules in `~/.claude/CLAUDE.md` did not catch. Reporting because the patterns appear to be model-side and likely generalize beyond one user's setup. Filed at the user's explicit direction via `/goal`. Environment: Claude Code on macOS, model `claude-opus-4-7[1

importance 26@RTinkslingerclosedbugplatform:macosarea:modelOriginal evidence ↗

issue2026-08-13T10:07:01Z

[BUG] autoMemoryEnabled=false does not suppress the ~11-16k memory preamble (re: closed #44829)

## Summary Setting `autoMemoryEnabled: false` in `~/.claude/settings.json` correctly disables auto-memory writes and stops Claude from attempting them, but the hardcoded memory preamble (instructional text + \"currently empty\" branch + formatting templates) still loads into the system prompt at session start. This was previously reported in #44829, which wa

importance 26@guillaume-paradiseopenbughas reproplatform:macosarea:costarea:coreOriginal evidence ↗

issue2026-08-13T10:25:08Z

Shift+Enter no longer inserts newline — submits instead (regression ~June 30)

## Bug Report ### Description `Shift+Enter` stopped inserting a newline in the chat input and now submits the message instead. This is a regression — it was working prior to approximately June 30, 2026. ### Environment - **Claude Code version**: 2.1.193, 2.1.200 (both affected) - **OS**: macOS Tahoe 26.5.1 - **Terminal (broken)**: Apple Terminal.app 470.2 -

importance 26@dwebb-pfopenbughas reproplatform:macosarea:tuiregressionOriginal evidence ↗

issue2026-08-13T15:55:07Z

[Windows] Desktop app 1.24012.1: fatal GPU-process crash (0x060C201E) via in-app Browser tab; crash leaves MSIX package unlaunchable (appxState=2) until Repair

## Environment - Claude desktop app **1.24012.1.0** (MSIX `Claude_pzs8sxrjxfjjc`, `build_type: windows-store`), Electron 42.7.0 / Chrome 148.0.7778.280 / Node 24.18.0 - Windows 11 Home 26200, de-AT locale, 32 GB RAM - GPU: NVIDIA GeForce RTX 2080 — **reproduced on two driver versions** (32.0.15.9595 and 32.0.16.1074), so not driver-specific - Regression: zer

importance 26@brainxdopenOriginal evidence ↗

issue2026-08-13T14:34:14Z

Opus model quality regression — significant degradation starting ~April 15, 2026

## What happened Starting approximately April 15, 2026, Claude Opus 4.6 in Claude Code has shown a noticeable quality regression compared to the previous month+. The same model that was working well for weeks is now significantly worse. ## Symptoms - **Fails to understand user instructions** that were previously handled well - **Ignores CLAUDE.md project ins

importance 25@Genaxa-Studioclosedbugplatform:windowsarea:modelplatform:vscodestaleOriginal evidence ↗

issue2026-08-13T00:56:16Z

Worktree sessions reuse an existing worktree directory from a previous session instead of creating a fresh one

## Environment - Claude Code 2.1.197 (desktop app session with worktree isolation) - macOS (Darwin 24.6.0) ## What happened Starting a new session (new task, worktree isolation enabled) placed the session inside an **existing** worktree directory that a previous session had created for an unrelated task, instead of creating a fresh worktree. A new branch was

importance 25@sandopolusopenbugplatform:macosarea:agentsOriginal evidence ↗

issue2026-08-13T14:32:10Z

[BUG] PermissionDecision in PreToolUse is ignored in latest VS Code Extension

### Preflight Checklist - [x] I have searched [existing issues](https://github.com/anthropics/claude-code/issues?q=is%3Aissue%20state%3Aopen%20label%3Abug) and this hasn't been reported yet - [x] This is a single bug report (please file separate reports for different bugs) - [x] I am using the latest version of Claude Code ### What's Wrong? I have an auto-ap

importance 24@klunejkoclosedbughas reproplatform:windowsplatform:vscodearea:hooksOriginal evidence ↗

issue2026-08-13T16:10:35Z

Make autonomous Claude Code actually viable: tiered Opus brains + Sonnet workers + persistent state

# The pitch The most interesting thing happening in Claude Code right now is people trying to run it as a brain — not a pair-programming buddy, but the actual orchestrating intelligence behind a long-running system. Pipelines, ML training, build automation, monitoring, content workflows. The operator goes to bed and Claude Code keeps the lights on. That use

importance 24@ThatDragonOverThereopenenhancementarea:agentsOriginal evidence ↗

issue2026-08-13T14:32:28Z

[BUG] Claude Code does not respect agent model definition, uses wrong model.

### Preflight Checklist - [x] I have searched [existing issues](https://github.com/anthropics/claude-code/issues?q=is%3Aissue%20state%3Aopen%20label%3Abug) and this hasn't been reported yet - [x] This is a single bug report (please file separate reports for different bugs) - [x] I am using the latest version of Claude Code ### What's Wrong? I've setup agents

importance 23@cheeselemonclosedbughas reproplatform:macosarea:modelarea:coreOriginal evidence ↗

issue2026-08-13T14:30:26Z

🚪🤜 KNOCK KNOCK...

## Bug Report ### Summary Claude Code consistently claims UI features "work" based on API/curl tests and code reading, without ever opening the actual application to verify visually. When called out, it saves a "feedback memory" promising to change — then repeats the exact same behavior in the next session. ### Environment - Claude Code CLI on Windows 11 - M

importance 23@aidatadeveloperclosedbugplatform:windowsarea:modelOriginal evidence ↗

issue2026-08-13T17:33:01Z

[BUG] macOS 26.5.1 kernel zone leak (data.kalloc.1024) from Claude Code CLI — claude.exe panics at ~20GB, leak rate scales 21→1027/sec with agent load

### Preflight Checklist - [x] I have searched [existing issues](https://github.com/anthropics/claude-code/issues?q=is%3Aissue%20state%3Aopen%20label%3Abug) and this hasn't been reported yet - [x] This is a single bug report (please file separate reports for different bugs) - [x] I am using the latest version of Claude Code ### What's Wrong? Claude Code CLI t

importance 23@LeifErikHopenbughas reproplatform:macosperf:memoryOriginal evidence ↗

issue2026-08-13T07:23:25Z

Auto-update fails repeatedly with ENOTEMPTY error on macOS with nvm

## Environment - **OS**: macOS (Darwin 24.6.0) - **Node Version**: v22.10.0 - **npm Version**: 10.9.0 - **Node Manager**: nvm - **Claude Code Version**: 2.0.46 → 2.0.47 (failing to update) - **Installation Path**: `~/.nvm/versions/node/v22.10.0/lib/node_modules/@anthropic-ai/claude-code` ## Description Claude Code's auto-update mechanism repeatedly fails wit

importance 22@david-gethers-cityblockopenbugduplicatehas reproplatform:macosarea:packagingOriginal evidence ↗

issue2026-08-13T14:28:56Z

[FEATURE] Allow forcing extended thinking on Opus 4.7

## Summary Per the docs, Opus 4.7 always uses adaptive reasoning, and `CLAUDE_CODE_DISABLE_ADAPTIVE_THINKING` / `MAX_THINKING_TOKENS` no longer apply. Please provide a way to opt out of adaptive reasoning on 4.7, the same way 4.6 allows. ## Motivation Adaptive reasoning under-thinks on questions where the *premise* is the trap, not the surface complexity. Th

importance 22@cminn10closedenhancementarea:modelstaleOriginal evidence ↗

issue2026-08-12T22:18:52Z

[BUG] The Claude desktop app is sending `x-apple.systempreferences://...` — a macOS-only URI — on your Windows machine

### Preflight Checklist - [x] I have searched [existing issues](https://github.com/anthropics/claude-code/issues?q=is%3Aissue%20state%3Aopen%20label%3Abug) and this hasn't been reported yet - [x] This is a single bug report (please file separate reports for different bugs) - [x] I am using the latest version of Claude Code ### What's Wrong? The Claude deskto

importance 22@DHDripclosedinvalidstaleOriginal evidence ↗

issue2026-08-13T07:12:32Z

Prompt cache fully re-created after turns with many parallel tool calls (cache_read collapses to system+tools floor) — ~74% of cache writes wasted on Opus 4.8 / v2.1.15x

## Describe the bug Since ~v2.1.154 (coincident with the Opus 4.7 → 4.8 switch), the prompt cache is repeatedly invalidated mid-session in two distinct ways, causing the entire conversation to be re-cached from scratch over and over. Across four of my sessions, **74% of all `cache_creation` tokens were waste** — re-caching content that had been cached second

importance 22@omrikaisopenbughas reproplatform:macosarea:costarea:coreOriginal evidence ↗

issue2026-08-12T22:19:04Z

Remote Control: built-in slash commands (/clear, /context) not intercepted — delivered to the model as plain text

## Environment - Claude Code CLI **2.1.172** on macOS (Darwin 25.5.0) - Local interactive session, accessed externally via **Remote Control** from the mobile app ## Expected Per the Remote Control docs: "Commands that produce text output, including `/compact`, `/clear`, `/context`, `/usage`, `/exit`, ... **work from mobile and web**." (supported since v2.1.1

importance 22@keonhwi-imclosedbughas reproplatform:macosarea:tuistaleOriginal evidence ↗

issue2026-08-13T10:27:48Z

[BUG] [VS Code Extension] Input field intercepts Ctrl+J, preventing macOS IME input source toggle (Regression in v2.1.195)

### Preflight Checklist - [x] I have searched [existing issues](https://github.com/anthropics/claude-code/issues?q=is%3Aissue%20state%3Aopen%20label%3Abug) and this hasn't been reported yet - [x] This is a single bug report (please file separate reports for different bugs) - [x] I am using the latest version of Claude Code ### What's Wrong? In the recent upd

importance 22@AquiTCDclosedbughas reproplatform:macosarea:ideplatform:vscodeOriginal evidence ↗

issue2026-08-13T09:07:32Z

Bundled ugrep OOMs the host: -E with two bounded {0,N} intervals explodes DFA construction to multiple GB

### What happened Claude Code's bundled `ugrep` (the CLI re-execs its own binary as `ugrep`, argv0=`ugrep`) allocates unbounded memory during **regex compilation** when run with `-E` (POSIX extended regex) on a pattern containing **two bounded `.{0,N}` intervals**. It reaches multiple GB of RSS *before scanning any input* and is OOM-killed (or SIGSEGVs under

importance 21@interkelstaropenbughas reproplatform:linuxarea:toolsperf:memoryOriginal evidence ↗

issue2026-08-13T14:34:26Z

[BUG] Usage Spike

### Preflight Checklist - [x] I have searched [existing issues](https://github.com/anthropics/claude-code/issues?q=is%3Aissue%20state%3Aopen%20label%3Abug) and this hasn't been reported yet - [x] This is a single bug report (please file separate reports for different bugs) - [x] I am using the latest version of Claude Code ### What's Wrong? I noticed a rapid

importance 20@tomtokitajrclosedbugduplicateplatform:windowsarea:coststaleOriginal evidence ↗

issue2026-08-13T02:35:00Z

[FEATURE] Stable, documented schema for ~/.claude/projects/<encoded-cwd>/<uuid>.jsonl line types

### Preflight Checklist - [x] I have searched [existing requests](https://github.com/anthropics/claude-code/issues?q=is%3Aissue%20label%3Aenhancement) and this feature hasn't been requested yet - [x] This is a single feature request (not multiple features) ### Problem Statement ## Context We are building a sibling VS Code / Cursor / Windsurf extension (`aims

importance 20@Mike-AugmentisLabsopenenhancementarea:idearea:docsOriginal evidence ↗

issue2026-08-13T14:32:30Z

Claude Desktop (Cowork): TLS verification failure on bridge.claudeusercontent.com — bundled Node CA bundle issue on Windows 11 [regression ~1 week]

### Preflight Checklist - [x] I have searched [existing issues](https://github.com/anthropics/claude-code/issues?q=is%3Aissue%20state%3Aopen%20label%3Abug) and this hasn't been reported yet - [x] This is a single bug report (please file separate reports for different bugs) - [x] I am using the latest version of Claude Code ### What's Wrong? Claude Desktop (C

importance 20@nilay-intractclosedbughas reproplatform:windowsarea:coworkregressionOriginal evidence ↗

issue2026-08-12T23:50:46Z

[BUG] Security: permissions.deny rules not working

### Preflight Checklist - [x] I have searched [existing issues](https://github.com/anthropics/claude-code/issues?q=is%3Aissue%20state%3Aopen%20label%3Abug) and this hasn't been reported yet - [x] This is a single bug report (please file separate reports for different bugs) - [x] I am using the latest version of Claude Code ### What's Wrong? Claude can read a

importance 20@collimarcoopenbugplatform:macosarea:securityarea:permissionsOriginal evidence ↗

issue2026-08-13T03:55:23Z

[BUG] Claude Code 2.1.228 repeatedly fails with ECONNRESET on Windows 11, while 2.1.220 works normally

### Preflight Checklist - [x] I have searched [existing issues](https://github.com/anthropics/claude-code/issues?q=is%3Aissue%20state%3Aopen%20label%3Abug) and this hasn't been reported yet - [x] This is a single bug report (please file separate reports for different bugs) - [x] I am using the latest version of Claude Code ### What's Wrong? # Claude Code 2.1

importance 20@lemon-happyopenbugplatform:windowsregressionarea:networkingOriginal evidence ↗

issue2026-08-13T09:32:44Z

[BUG] Windows Desktop 2.1.227: cross-session send_message to a paused session is never delivered to the model, leaving the session in a permanent phantom turn

## Summary On the Windows Claude Desktop app, `mcp__ccd_session_mgmt__send_message` stopped delivering messages to **paused** (idle-timed-out) sessions after the desktop app switched its bundled Claude Code binary to 2.1.227. The tool returns `Message sent`, the target session is resumed, and the message renders in the target session's UI — but the model nev

importance 20@VoxilienVoxilopenbughas reproplatform:windowsregressionarea:desktopOriginal evidence ↗

issue2026-08-13T10:27:57Z

[BUG] Connectors continue to appear in `claude mcp list` even after disconnected in the Claude.ai web UI

### Preflight Checklist - [x] I have searched [existing issues](https://github.com/anthropics/claude-code/issues?q=is%3Aissue%20state%3Aopen%20label%3Abug) and this hasn't been reported yet - [x] This is a single bug report (please file separate reports for different bugs) - [x] I am using the latest version of Claude Code ### What's Wrong? Cloud connectors

importance 19@dgc-treeclosedbughas reproplatform:macosarea:autharea:mcpOriginal evidence ↗

issue2026-08-13T00:41:46Z

Post-mortem 2026-04-28: 12 multi-agent coordination bugs surfaced across a single autonomous-overnight cycle

# Post-mortem 2026-04-28: 12 multi-agent coordination bugs surfaced across a single autonomous-overnight cycle > Filed as a new issue rather than as a comment on FR #53610 because this catalog is generic to any multi-agent-coordination project — not specific to that FR's "9 architectural gaps that defeat unattended overnight operation" framing. FR #53610 has

importance 19@ThatDragonOverThereopenenhancementarea:hooksarea:agentsarea:permissionsOriginal evidence ↗

issue2026-08-13T17:23:51Z

[BUG] Plan-mode webview "Select text to add comments" — comments never reach the model

### Preflight Checklist - [x] I have searched [existing issues](https://github.com/anthropics/claude-code/issues?q=is%3Aissue%20state%3Aopen%20label%3Abug) and this hasn't been reported yet - [x] This is a single bug report (please file separate reports for different bugs) - [x] I am using the latest version of Claude Code ### What's Wrong? Environment: Clau

importance 19@malheirosclosedbugarea:ideplatform:vscodeplatform:wslOriginal evidence ↗

issue2026-08-13T14:32:26Z

[BUG] settings.local.json env block not applied when ~/.claude/settings.json is a symlink (2.1.139 regression)

### Preflight Checklist - [x] I have searched existing issues and this hasn't been reported yet - [x] This is a single bug report (please file separate reports for different bugs) - [x] I am using the latest version of Claude Code ### What's Wrong? When `~/.claude/settings.json` is a symbolic link to a file outside `~/.claude/`, 2.1.139 does not load the env

importance 19@Blackth0rnclosedbughas reproplatform:macosarea:coreregressionOriginal evidence ↗

issue2026-08-13T10:27:52Z

[BUG] Context contamination in bridged sessions: exfiltration-shaped instructions and fabricated tool results present in model context but absent from saved transcripts (3 incidents / 3 days)

## What's Wrong? Over three consecutive days (2026-06-09 to 2026-06-11, JST), content that **does not exist in the saved transcript on disk** repeatedly appeared in the model's context across 4 different sessions on the same machine, steering the model toward data exfiltration. The model refused every time, and our local audit found no actual egress — but th

importance 19@grinzingclosedbugplatform:macosarea:modelarea:corearea:securityOriginal evidence ↗

issue2026-08-13T13:52:41Z

[BUG] 'claude-api' is consuming entire context

### Preflight Checklist - [x] I have searched [existing issues](https://github.com/anthropics/claude-code/issues?q=is%3Aissue%20state%3Aopen%20label%3Abug) and this hasn't been reported yet - [x] This is a single bug report (please file separate reports for different bugs) - [x] I am using the latest version of Claude Code ### What's Wrong? When attempting t

importance 19@SenojLuapopenbughas reproplatform:linuxarea:skillsOriginal evidence ↗

issue2026-08-12T22:18:47Z

[BUG] Desktop app remote SSH install fails on Ubuntu 24.04 — "installed cli ... is not runnable"

### Preflight Checklist - [x] I have searched [existing issues](https://github.com/anthropics/claude-code/issues?q=is%3Aissue%20state%3Aopen%20label%3Abug) and this hasn't been reported yet - [x] This is a single bug report (please file separate reports for different bugs) - [x] I am using the latest version of Claude Code ### What's Wrong? Connecting to a r

importance 19@dylan33smithclosedbughas reproplatform:linuxregressionarea:installationOriginal evidence ↗

issue2026-08-12T22:19:13Z

vm_bundles grows to 9.3GB+ on initial download after v1.15962.0 update (June 25 2026) — freezes Intel Mac on Cowork open

### Preflight Checklist - [x] I have searched [existing issues](https://github.com/anthropics/claude-code/issues?q=is%3Aissue%20state%3Aopen%20label%3Abug) and this hasn't been reported yet - [x] This is a single bug report (please file separate reports for different bugs) - [x] I am using the latest version of Claude Code ### What's Wrong? After updating to

importance 19@danieloryn-groupclosedbughas reproplatform:macosarea:coworkregressionOriginal evidence ↗

issue2026-08-13T11:59:52Z

[BUG] Cowork: new projects lost "Choose a folder" — Context menu replaced with Chat-style upload-only knowledge menu after Chat/Cowork merge

### Preflight Checklist - [x] I have searched [existing issues](https://github.com/anthropics/claude-code/issues?q=is%3Aissue%20state%3Aopen%20label%3Abug) and this hasn't been reported yet - [x] This is a single bug report (please file separate reports for different bugs) - [x] I am using the latest version of Claude Code ### What's Wrong? ## Summary Since

importance 19@rexilxopenbugplatform:macosarea:coworkarea:desktopOriginal evidence ↗

issue2026-08-13T14:02:58Z

[BUG] v2.1.210 regression: PreToolUse prompt-hook deny stops the entire turn (hook_stopped_continuation) instead of returning a tool error

**Environment:** Claude Code 2.1.210 / 2.1.211, macOS (darwin 25), interactive sessions. **Setup:** a `type: "prompt"` PreToolUse hook on Bash (LLM security judge using the documented `{ok, reason}` contract from https://code.claude.com/docs/en/hooks). **Before (≤2.1.209):** judge `ok:false` denials fed back to the model as `is_error` tool_results; the model

importance 19@tehlowkeywizopenbughas reproplatform:macosarea:hooksregressionOriginal evidence ↗

issue2026-08-12T23:17:36Z

[BUG] Receiving session is interrupted when a cross-session message arrives, and afterwards has no knowledge of the message

### Preflight Checklist - [x] I have searched [existing issues](https://github.com/anthropics/claude-code/issues?q=is%3Aissue%20state%3Aopen%20label%3Abug) and this hasn't been reported yet - [x] This is a single bug report (please file separate reports for different bugs) - [x] I am using the latest version of Claude Code ### What's Wrong? [BUG] Receiving s

importance 19@DickKoersopenbugplatform:windowsarea:agentsregressionOriginal evidence ↗

issue2026-08-13T10:12:31Z

Desktop app (Windows): cross-session messages silently dropped — held for an approval the UI never offers, then expire (~5 min); regression since app 1.28929.0

# Bug report — desktop app (Windows): cross-session messages are silently dropped: held for an approval the UI never offers, then expire after ~5 minutes ## Preflight - Searched existing issues. Closest are #86212 (recipient never runs a turn, normal-mode, recoverable by typing) and #85888 (held-for-approval with no approval surface, macOS agents dashboard).

importance 19@arthurmoraesfernandes-afkopenbughas reproplatform:windowsregressionarea:desktopOriginal evidence ↗

issue2026-08-13T14:33:03Z

[BUG] Can't use Claude Cowork via personal subscription on DEP enrolled Macs

### Preflight Checklist - [x] I have searched [existing issues](https://github.com/anthropics/claude-code/issues?q=is%3Aissue%20state%3Aopen%20label%3Abug) and this hasn't been reported yet - [x] This is a single bug report (please file separate reports for different bugs) - [x] I am using the latest version of Claude Code ### What's Wrong? I am trying to us

importance 18@gangu-uncclosedbugplatform:macosarea:securityarea:coworkstaleOriginal evidence ↗

issue2026-08-13T10:28:04Z

Worktree edits can silently land in the parent repo checkout (nested .claude/worktrees/ + no out-of-worktree write guard)

## Summary When working in a Claude Code-managed git **worktree**, file edits can silently be written to the **parent repository checkout** instead of the active worktree. The worktree stays clean, so the diff panel shows "No changes" and the preview doesn't reflect edits — while the work actually lands in a different checkout of the same repo. ## Environmen

importance 18@emilbergsclosedduplicateplatform:macosarea:toolsarea:agentsstaleOriginal evidence ↗

issue2026-08-13T10:28:49Z

[Bug][cyber] ClAudit false-positive in DJI — req_011CcUCoXHXhVnD1FVWiQuqJ

**Type:** Cybersecurity safety-filter false positive · **Work domain (heuristic):** `general` ### Why this is a false positive This request was part of an authorized, in-scope effort to gather publicly available tooling and research and to prepare a local USB/ADB diagnostic path against the operator's own hardware. The flagged content is dual-use device-rese

importance 18@sworrlclosedduplicateplatform:linuxarea:modelarea:securitystaleOriginal evidence ↗

issue2026-08-13T17:37:00Z

[BUG] Cursor flashes on every screen update (even while typing) in tmux

### Preflight Checklist - [x] I have searched [existing issues](https://github.com/anthropics/claude-code/issues?q=is%3Aissue%20state%3Aopen%20label%3Abug) and this hasn't been reported yet - [x] This is a single bug report (please file separate reports for different bugs) - [x] I am using the latest version of Claude Code ### What's Wrong? When using Claude

importance 18@solace-rcampbellopenbugplatform:linuxarea:tuiregressionOriginal evidence ↗

issue2026-08-13T10:24:52Z

[Bug] Dual-use safeguard false positive downgrades Claude 5 to Opus 4.8 during authorized security review of own codebase

**Bug Description** False positive: Fable 5 dual-use safeguard downgraded me to Opus 4.8 during an authorized security review of my OWN codebase. Context: I'm the owner/founder of a B2B SaaS (FastAPI backend). I asked Fable 5 to run a deep security review of my own repo — tenant-isolation/IDOR, auth-token forgery, SQL injection, webhook signature verificatio

importance 18@amilovidovopenbugplatform:macosarea:modelarea:securitystaleOriginal evidence ↗

issue2026-08-13T10:25:01Z

Auto-mode classifier repeatedly flags Agent dispatches as prompt injection due to harness-injected context-mode plugin block

## Description During a long `subagent-driven-development` session (implementing a multi-task plan via the Agent tool), the auto-mode permission classifier repeatedly denied `Agent` tool calls, citing prompt-injection / "classifier bypass" concerns. Every denial pointed at the same source: a `<context_window_protection>` instruction block that names MCP tool

importance 18@dylanbenachopenbugplatform:macosarea:securityarea:agentsarea:pluginsOriginal evidence ↗

issue2026-08-13T12:42:15Z

[BUG] Claude Desktop MSIX: CIG (MicrosoftSignedOnly) + vendor-signed vk_swiftshader.dll kills GPU process on every browser preview (0x060C201E)

### Preflight Checklist - [x] I have searched [existing issues](https://github.com/anthropics/claude-code/issues?q=is%3Aissue%20state%3Aopen%20label%3Abug) and this hasn't been reported yet - [x] This is a single bug report (please file separate reports for different bugs) - [x] I am using the latest version of Claude Code ### What's Wrong? On Windows 11 (bu

importance 18@allarounderservicesopenbugOriginal evidence ↗

issue2026-08-13T08:12:42Z

[BUG] Claude Max 20 subscription is being fully consumed without any usage

For almost a week now, I have been completely unable to use my Claude Max 20 subscription. A few minutes after each quota reset, my entire quota is already exhausted **without me even using Claude**. ## What I've already tried - Revoked every Claude Code token. - Deleted all Claude sessions. - Verified that I have **no API keys** associated with my account.

importance 18@psykokwak-comopenbugOriginal evidence ↗

issue2026-08-13T16:32:19Z

[BUG] Apps gateway serves Claude Desktop an `otlpEndpoint` pointing at its own bearer-gated OTLP ingest but no `otlpHeaders`, so every Desktop telemetry flush is rejected with `missing_token`

### Preflight Checklist - [x] I have searched [existing issues](https://github.com/anthropics/claude-code/issues?q=is%3Aissue%20state%3Aopen%20label%3Abug) and this hasn't been reported yet - [x] This is a single bug report (please file separate reports for different bugs) - [x] I am using the latest version of Claude Code ### What's Wrong? ## Summary A Clau

importance 18@k-brooksopenbugOriginal evidence ↗

issue2026-08-13T17:49:50Z

[BUG] Windows/MSIX 1.28929.0: cross-session messages land in the target's composer but are never submitted — session never responds

### Preflight Checklist - [x] I have searched [existing issues](https://github.com/anthropics/claude-code/issues?q=is%3Aissue%20state%3Aopen%20label%3Abug) and this hasn't been reported yet - [x] This is a single bug report (please file separate reports for different bugs) - [x] I am using the latest version of Claude Code ### What's Wrong? On Windows (MSIX/

importance 18@lschlegel9826openbughas reproplatform:windowsarea:agentsregressionOriginal evidence ↗

issue2026-08-13T07:43:48Z

[BUG] Desktop app (Windows Store 1.28929.0): every background session turn dies silently (zero output, no error, exclamation badge); interactive session unaffected

### Preflight Checklist - [x] I have searched [existing issues](https://github.com/anthropics/claude-code/issues?q=is%3Aissue%20state%3Aopen%20label%3Abug) and this hasn't been reported yet - [x] This is a single bug report (please file separate reports for different bugs) - [x] I am using the latest version of Claude Code ### What's Wrong? Since ~06:30 ET o

importance 18@RexBurkopenbughas reproplatform:windowsregressionarea:desktopOriginal evidence ↗

issue2026-08-12T22:41:23Z

Claude Code published a user's personal information to a public GitHub issue, unprompted and unchecked

# Claude Code published a user's personal information to a public GitHub issue, unprompted and unchecked ## Summary While drafting a comment for a public issue on this repository, Claude Code included the user's Windows account name — quoted from working material it had generated earlier in the session — and posted it with `gh` without any review of the cont

importance 18@Gamoolyopenbughas reproarea:toolsarea:securityOriginal evidence ↗

Release, roadmap, and discussion

Publicly indicated next

Observation trail