Claude Code bypassPermissions prompts on .claude, .git
A Reddit thread says Anthropic changed Claude Code in version 2.1.78 so bypassPermissions no longer fully bypasses prompts for changes under .claude and .git. The post argues the new behavior is hardcoded and leaves no user-facing override.
Hot take: this looks more like a breaking safety-policy change than a classic security exploit, but it matters because it rewrites what the mode name promises.
- –The core complaint is about permission enforcement, not code execution or data theft.
- –Anthropic appears to be intentionally exempting sensitive paths from full bypass behavior.
- –The lack of an override flag makes the change painful for advanced users who want the old workflow.
- –If you depend on Claude Code automation, version pinning and permission regression tests are now prudent.
DISCOVERED
53d ago
2026-04-05
PUBLISHED
53d ago
2026-04-05
RELEVANCE
AUTHOR
gamingvortex01