Skip to content

Claude Code has Sandbox Escape via Persistent Configuration Injection in settings.json

High severity GitHub Reviewed Published Feb 6, 2026 in anthropics/claude-code • Updated Feb 6, 2026

No open alerts for this advisory

Give feedback on Dependabot alerts