Source Intelligence
Follow Discord

DisclaimerUnofficial, and not affiliated with Anthropic. Nearly all of this is read straight out of what ships: npm bundles, captured prompts, published docs. Anthropic's own notes go in verbatim, marked as theirs. The rest is my reading, and every entry carries the strings behind it. If one looks wrong, vote it down and say why.

← All of v2.1.191 Home All releases ←olderv2.1.190 v2.1.193newer→
Claude Code v2.1.191

Linux Automount /net Path Protection

What changed: Claude Code now detects and requires manual approval for any read or glob request touching the Linux automount -hosts map (paths under /net/…). Previously only Windows UNC paths were blocked this way.

Details
  • Accessing /net/<hostname>/... silently triggers a DNS lookup and NFS mount to a remote host, which is a potential data-exfiltration and latency vector.
  • The new check fires before any other access control decision.
  • Message shown: Claude requested permissions to read from <path>, which is under the /net automount map and could trigger a DNS lookup and NFS mount to a remote host.
  • Decision reason recorded: "Automount -hosts path detected (defense-in-depth check)".
  • Both file reads and glob patterns are covered.
  • /proc/net/tcp and /proc/net/tcp6 are also in scope (they reveal active network connections on Linux).
Evidence

Automount path detector (search for "Automount -hosts path detected (defense-in-depth check)")

Strings lifted out of the shipped bundle, so the claim above can be checked against them.

See this entry in the whole of v2.1.191 →