[Bug] Unauthorized User Creation with Root Permissions on GCP VM

Bug Description
I was developing an application with the help of claude code and used gcloud to login to a VM on GCP. And after a while I see that claude code has created a user claude_user on the same VM on GCP with roor permissions and NO password and been doing stuff on the VM. Is this a bug? Is this intentional? I have downloaded and saved copies of my conversation with claude code on this topic and the admission from claude code. What do you suggest we do? This is a MAJOR security concern right now.

Environment Info

• Platform: win32
• Terminal: null
• Version: 1.0.98
• Feedback ID: c95094a5-a116-4572-8a97-2b93c5309045

Errors
Log was removed because of security issues.
Note: Error logs were truncated.