←── back to feed
/topics/claude-code-security-and-session-issues
Claude Code security and session issues
21 items●1 sources●updated 10d ago●trend 0
Claude Code has surfaced multiple security and operational issues including plaintext storage of OAuth tokens, uncontrolled data retention practices, and session management vulnerabilities that allow unauthorized access and code execution. Researchers have documented flaws in version 5.1, reverse-engineered Anthropic's infrastructure, and developed workarounds like isolated VM environments and session guards to mitigate risks.
- Claude Code stores OAuth tokens in plaintext, exposing authentication credentials to local access
- Responding to Claude's feedback prompts automatically opts users into data sharing without explicit consent
- Claude Code version 5.1 has serious flaws affecting session limits and operational stability
- Claude Code PR merge rate reaches 84%, but 98% of actions execute without user visibility
- Multiple tools emerged to isolate Claude Code execution: GuardRail shell guards, Coop VM environments, and Roost remote session browser
[HN]hacker news21
Reverse-Engineering Claude Web's MicroVM: Uncovering Anthropic's Hidden Antspace
Claude Zero Data Retention: Anthropic's Five States, Mapped
Responding to Claude's feedback prompts is opting-in for data sharing
I Let Claude Merge 38 PRs. Here's What Broke
Show HN: GuardRail, shell guards that stop Claude Code before it pushes to main
Claude Code fable 5.1 is seriously flawed
Coop – Isolated VM Environments for Running Claude Code and Codex
Show HN: Yume, a desktop workspace for Claude Code sessions
The Claude Compiler Is Dead. Long Live the Claude Compiler
Show HN: Move Claude Code sessions between accounts in Claude Desktop
Claude Code vs. Codex – For Pentesting
Show HN: Roost, a browser window into your remote coding sessions
Show HN: DeepMem plugin for Claude Code – persistent semantic memory via MCP
Show HN: Unofficial 3DS Port of F-Zero X Written by Claude Code
AI coding agent PR merge rates: Claude 84%, Codex 74%, Devin 43%, humans 85%
98% of What Claude Code Does, I Never See. The 0.27% It Stops for Is the Point
Show HN: Claude-Sniff – Loopback MitM for Claude Code on Bedrock
Claude Code: Self-Hosted Environments
Claude Code Stores OAuth Tokens in Plaintext
Claude Code session limits are jacked up with Fable 5.1
Show HN: Kit. Claude Code but Concise