[BUG] Claude always using cd command into current working directory in combination with Git commands, requiring approval for whitelisted commands
Status Fixed / completed
Reported on v2.1.68
Maintainer reply ✓ Yes — claude[bot]
Workaround ✓ Mentioned in thread ↓
Activity 16 comments · opened Mar 4, 2026 · closed May 18, 2026
💡 Likely answer: A maintainer (claude[bot], contributor)
responded on this thread — see the highlighted reply below.
Preflight Checklist
- [x] I have searched existing issues and this hasn't been reported yet
- [x] This is a single bug report (please file separate reports for different bugs)
- [x] I am using the latest version of Claude Code
What's Wrong?
All of Claude git commands uses cd combinaton like:
cd <current working directory> && git ...
So even though I have git commands like git diff etc in my alow list, they all require approval due to "Compound commands with cd and git require approval to prevent bare repository attacks" warning.
En earlier versions, Claude would not pointlessly use cd command with git.
What Should Happen?
cd to current working directory should not trigger warning. Claude should not pointlessly run cd commands to current directory.
Error Messages/Logs
Steps to Reproduce
Work in a git repo, ask Claude to fix some bug. Claude begins running git commands like diff/log etc.
Claude Model
Opus
Is this a regression?
Yes, this worked in a previous version
Last Working Version
_No response_
Claude Code Version
2.1.68 (Claude Code)
Platform
Anthropic API
Operating System
macOS
Terminal/Shell
PowerShell
Additional Information
_No response_
16 Comments
Found 3 possible duplicate issues:
This issue will be automatically closed as a duplicate in 3 days.
🤖 Generated with Claude Code
Seems to have begun a week ago or so, and still it happens more than ever.
This is a huge bug for me - I've tried:
Yolo mode is the only workaround and our admins disabled it.
Platform windows
I tried also to tell Claude to not do compound commands and instead it is now inserting the working directory in git commands with the -c flags, which is even worse.
This is now handled by a PreToolUse hook.
npx cc-safe-setupinstalls a cd-git-allow hook that auto-approvescd + gitcompounds when the git operation is read-only (log, diff, status, branch, show). Destructive operations still require approval.Source: cd-git-allow.sh
+1 still an issue, claude cds into the directory its already in every time
Interestingly it doesn't happen when Claude models are used from GitHub Copilot. So it really seems to be a tooling issue on Claude itself (notably VSC plugin) and not on the model.
I dont use VSC - just Claude Code in terminal and still have the issue
This issue was fixed as of version 2.1.113.
@claude: Wrong. I'm running version 2.1.152, and it's still happening.
@claude: I'm using 2.1.153 and still having this issue. It's extremely annoying and time consuming.
I ended up putting this into my
CLAUDE.mdto work around it:Doesn't work. Claude ignores instructions constantly.
@claude issue is still happening in 2.1.186.
Same issue happening on macOS with version
v2.1.204Notably my dev directory is symlinked from another location. This may cause path normalization to misinterpret where the correct directory is.
I also hit this constantly on MacOS