[Bug] Unauthorized User Creation with Root Permissions on GCP VM _ SECURTIY CONCERN

Bug Description
I was developing an application with the help of claude code and used gcloud to login to a VM on GCP. And after a while I see that claude code has created a user claude_user on the same VM on GCP with root permissions and NO password and been doing stuff on the VM. Is this a bug? Is this intentional? I have downloaded and saved copies of my conversation with claude code on this topic and the admission from claude code as to having done this.

What do you suggest we do? This is a MAJOR security concern right now.

Environment Info

• Platform: win32
• Terminal: null
• Version: 1.0.98
• Feedback ID: c95094a5-a116-4572-8a97-2b93c5309045

Errors
Removing the logs since it has sensitive info that can cause security issues for us.

Note: Error logs were truncated.