{"version":"2.1.212","anchor":"worktree-symlink-security-check","canonical_anchor":"worktree-symlink-security-check","heading":"Worktree Symlink Security Check","tier":null,"area":null,"scope":null,"heads_up":null,"url":"https:\/\/changelogs.core-directive.com\/v\/2.1.212\/e\/worktree-symlink-security-check","release_url":"https:\/\/changelogs.core-directive.com\/v\/2.1.212","markdown":"### Worktree Symlink Security Check\n\nWorktree creation now rejects `.claude`, `.claude\/worktrees`, and `.claude\/worktrees\/<name>` if any of them is a symbolic link, preventing path traversal outside the repository.\n\nError shown: `Cannot create worktree: <path> is a symlink. A repository-committed symlink at .claude, .claude\/worktrees, or .claude\/worktrees\/<name> could redirect worktree creation outside the repository. Remove the symlink and retry.`\n\n**Evidence**\n\n\"is a symlink. A repository-committed symlink at .claude, .claude\/worktrees\u2026\" (search for `\"git_worktree_create_symlink_rejected\"`)"}