New macOS automount browse-surface detection

You'll notice No documentation found

Paths under macOS /Network automount surfaces now also require manual approval.

Claude Code now also flags paths under /Network automount browse surfaces as requiring manual approval, in addition to the existing /net (-hosts) automount detection, since these can trigger directory-service lookups or mounts.

Read from

Names in the bundle/Network

How sure we are

One source agreesOne thing we can check says the same as this entry.

Anthropic's release notes agreeChanged --add-dir, /add-dir, and additionalDirectories to refuse network paths (UNC shares, /net/<host> automounts) with a message before…

See this entry in the whole of v2.1.257 →

The build it came inv2.1.257

1 Sep 2026 · 505 entries, this one is #206.

Use it now45
You'll notice231
Nothing to try yet71
Under the hood158

Open the release →

Anthropic's note

Upstream's own release notes for v2.1.257 name something this entry names, so the two are probably about the same change. Probably: the pairing is made on a shared name rather than on the words around it.

Changed --add-dir, /add-dir, and additionalDirectories to refuse network paths (UNC shares, /net/<host> automounts) with a message before touching them; on Windows use a mapped drive letter

Either side of it

v2.1.252Older
v2.1.258Newer

Is this right?

Other releases about the same thing. Found by shared names or similar wording; neither means one caused the other.

v2.1.268 Bash tool execution now threads sandbox network lists computed at permission time into the actual spawn
Both mention network
v2.1.268 Per-command sandbox network allowlist can now be looked up and shown separately from the global allowlist
Both mention network
v2.1.268 Sandbox network permission check: per-command allowlist and richer denial reasons
Both mention network