Follow Discord
Sweep 22 Oct 2026 · 21:04Z Build v2.1.309 528 read Stable v2.1.308 Latest v2.1.309 Next v2.1.309 Feeds RSS JSON llms.txt llms-full.txt Unofficial

Claude Code v2.0.37 ·

Windows Path Security Refinement

Entry
JSON All of v2.0.37
EntryKind: in v2.0.37,
ChangesSection of the release

Simplified UNC Path Detection: The Windows UNC path detection was simplified from 8 security checks down to 1 basic pattern check. The new implementation removes specific checks for:

  • IPv4 address-based UNC paths (e.g., \\192.168.1.1\share)
  • IPv6 address-based UNC paths (e.g., \\[fe80::1]\share)
  • WebDAV DavWWWRoot patterns
  • SSL/port patterns like @SSL@8080

File operations no longer check for UNC paths at all, while bash command execution retains basic UNC path blocking. The security impact is reduced coverage for IP-based UNC paths and WebDAV-specific attacks.

Evidence

Old mB1() function at line 469909 (v2.0.36), new i2Q() function at line 222404, file path validation Cr2() at line 474880

Strings lifted out of the shipped bundle, so the claim above can be checked against them.

See this entry in the whole of v2.0.37 →

Feedback