[Bug] Security: Command execution without user authorization

Bug Description
executing command that the user did not authorize

Environment Info

• Platform: darwin
• Terminal: vscode
• Version: 2.1.87
• Feedback ID: 1651b0c4-d039-444d-9f7a-57581baa5959

Errors

[{"error":"Error: Claude Code web sessions require authentication with a Claude.ai account. API key authentication is not sufficient. Please run /login to authenticate, or check your authentication status with /status.\n    at iY (/$bunfs/root/src/entrypoints/cli.js:2923:8703)\n    at jp1 (/$bunfs/root/src/entrypoints/cli.js:2923:13123)\n    at Ps7 (/$bunfs/root/src/entrypoints/cli.js:2923:13759)\n    at GHK (/$bunfs/root/src/entrypoints/cli.js:5170:12999)\n    at RHK (/$bunfs/root/src/entrypoints/cli.js:5170:13076)\n    at i8 (/$bunfs/root/src/entrypoints/cli.js:453:26061)\n    at useState (/$bunfs/root/src/entrypoints/cli.js:453:104408)\n    at <anonymous> (/$bunfs/root/src/entrypoints/cli.js:444:7897)\n    at vU_ (/$bunfs/root/src/entrypoints/cli.js:5170:13036)\n    at bP9 (/$bunfs/root/src/entrypoints/cli.js:5932:22255)\n    at async <anonymous> (/$bunfs/root/src/entrypoints/cli.js:16629:1266)","timestamp":"2026-03-29T10:13:55.684Z"},{"error":"Error: Claude Code web sessions require authentication with a Claude.ai account. API key authentication is not sufficient. Please run /login to authenticate, or check your authentication status with /status.\n    at iY (/$bunfs/root/src/entrypoints/cli.js:2923:8703)\n    at jp1 (/$bunfs/root/src/entrypoints/cli.js:2923:13123)\n    at Ps7 (/$bunfs/root/src/entrypoints/cli.js:2923:13759)\n    at GHK (/$bunfs/root/src/entrypoints/cli.js:5170:12999)\n    at RHK (/$bunfs/root/src/entrypoints/cli.js:5170:13076)\n    at i8 (/$bunfs/root/src/entrypoints/cli.js:453:26061)\n    at useState (/$bunfs/root/src/entrypoints/cli.js:453:104408)\n    at <anonymous> (/$bunfs/root/src/entrypoints/cli.js:444:7897)\n    at vU_ (/$bunfs/root/src/entrypoints/cli.js:5170:13036)\n    at ZP9 (/$bunfs/root/src/entrypoints/cli.js:5932:13381)\n    at async <anonymous> (/$bunfs/root/src/entrypoints/cli.js:16629:1266)","timestamp":"2026-03-29T10:13:55.684Z"}]