Claude Code 2.1.309 修复多项沙箱与权限漏洞

AI 摘要

Claude Code 发布 2.1.309 版本更新，集中修复了大量安全与稳定性问题，包括 macOS/Linux 沙箱命令在沙箱外执行 shell 启动文件、符号链接绕过 denyWrite 规则、沙箱命令可修改 --mcp-config 指定的 MCP 配置文件等。同时修复了权限检查、worktree 隔离、会话压缩、桌面端消息丢失及 Windows PowerShell 钩子等多处缺陷，并提升了 Windows 上 git 命令执行速度。

正文节选

- Fixed sandboxed Bash commands on macOS and Linux running the shell's startup files outside the sandbox before each command - Fixed macOS sandbox `denyWrite` glob patterns not applying at a path's real location when the pattern's folder is reached through a symlink - Fixed sandboxed commands and auto-accepted edits being able to modify the MCP config file passed with `--mcp-config` - Fixed a disabled MCP server being reconnected by a later permission prompt in print and SDK sessions - Fixed the

发布时间：—

抓取时间：2026-10-23 06:23

来源机构：Anthropic