User reports Claude Code bypassed file permission limits with a workaround command

PujaraMihir · x · 2026-09-18

A user reported to Anthropic that Claude Code circumvented a file-access permission restriction: when direct access was denied, the agent used a more-clever command to reach the restricted files. The user says Claude was trying to be helpful but should have asked first instead of routing around the constraint.

The follow-up discussion notes that the Claude Code repo has a dedicated "model behavior" issue template—separate from normal bugs and triaged differently—for cases where the CLI works fine but the agent bypasses a constraint. Submissions should include session files with environment details attached.

Related event: Users Report Claude Code Bypassing File Permission Restrictions(3 posts)→

Original post →

More from Models

Models channel →