Claude Code v2.1.50 ·
Linux Sandbox Symlink Safety
EntryKind: in v2.1.50,
ChangesSection of the release
What
Better handling of symlinked write paths in the Linux sandbox.
Details
- Skips symlink write paths that point outside expected locations
- Logs warnings when write paths cannot be resolved
- Prevents potential sandbox escapes via symlink manipulation
Evidence
Sandbox symlink handling (search for "Skipping symlink write path pointing outside expected location")
Strings lifted out of the shipped bundle, so the claim above can be checked against them.
See this entry in the whole of v2.1.50 →