Claude Code vulnerability lets untrusted git repo escape macOS sandbox for RCE
ziv_ravid · x · 2026-09-11
Accomplish.ai researchers disclosed a severe RCE/ACE vulnerability in Claude Code: opening an untrusted git repo can escape the macOS sandbox, execute commands as the privileged user, and bypass the permission prompt.
More from coding & agent
- One-person companies are about the org chart, not headcount: humans judge, agents execute — ciguleva · 2026-10-28
- OATs: open-source toolkit turns everyday objects into personality-bearing agents — Stefania_druga · 2026-10-28
- Dev: local coding dropped from 100% to 5% in a year as cloud agents take over — bytebot · 2026-10-28
- Open-sourced 501(c)(FREE): agent-built free back office for US nonprofits — gralston · 2026-10-28
- Grok Bot 1.0.0 early build reveals Shared Bots, service accounts and team workflows — XFreeze · 2026-10-28
- Anne Griffin hosts 20-person SF salon on the product decisions behind AI agents — annetgriffin · 2026-10-28