›_ Claude Code Issues
Claude Code Issues / Platform areas / Security issues on Linux / Page 2

Security issues on Linux — page 2

Issues the maintainers labelled both platform:linux and area:security.

974 issues · 261 open · 713 resolved (73%) · first seen May 20, 2025

Is this getting better or worse?

This class of problem is converging. 329 new reports in the last 90 days vs 502 in the 90 before — -34%. The open backlog peaked at 381 in 2026-07 and sits at 261 today.

0 95 191 286 381 2025-052025-112026-052026-10
2025-05 — First reports2026-06 — Most new reports (284)2026-07 — Peak backlog (381 open)

Derived by counting each matching issue from its creation date until it closed. First-party computation over the anthropics/claude-code tracker — the trend is not published anywhere upstream.

Which builds report this

273 of these reports name the Claude Code build they were running, spanning 128 releases. Heaviest reporters:

Report volume, not a defect count: an issue can mention a build without that build having caused the failure. Versions come from the version string in the bug-report template, matched against real published tags.

Do these get fixed?

Median time to close is 48 days across 713 closures. Of the 713 closures with a recorded reason, 8% were closed as completed and 659 as not-planned or duplicate. The most recent completed fix landed in 2026-09.

Workarounds reported by the community

61 of these issues post a workaround someone says worked. The highest-engagement ones:

bypassPermissions mode not working in VS Code extension
issue was reproduced on after upgrade IDE-VSCODE-CC-01-v1: Workaround — bypassPermissions in VSCode Extension Linked rule: [IDE-VSCODE-CC-01-v1](IDE-VSCODE-CC-01-v1.md) Upstream: [anthropics/claude-code 20536]( --- Envir…
Found in the thread of #20536 · still open
[FEATURE] GPU device passthrough in sandbox mode
I did end up with a workaround, but this would be a really good feature to support natively so trickery is not required. 1. Ensure ~/.local/bin/ is on your PATH before /usr/bin 2. Make ~/.local/bin/bwrap: 3. Relaunch cla…
Found in the thread of #13108 · still open
[BUG] .claudeignore not ignoring private files
…oses such as software testing or inter agent documentation. Workarounds to this scenario include changing while the agents are working and restoring it when doing git operations, or allowing agents to ignore which leads…
Found in the thread of #16704 · resolved
[BUG] Linux sandbox broken - bad bwrap calls and no allow permissions
…ect root instead of protecting .git/HEAD, .git/config, etc. Workaround Added rooted patterns to .gitignore: /HEAD /config /hooks /objects /refs /.bash profile /.bashrc /.profile /.zprofile /.zshrc /.gitconfig /.gitmodule…
Found in the thread of #17727 · still open
[BUG] ask list is ignored when "Bash" is in allow list
…ands) and safety (protection against destructive commands). Workarounds attempted (none work) : - - Bypasses everything including ask list - - Prompts for every new command type
Found in the description of #6527 · still open

Excerpts are quoted from the linked issue so you can judge relevance before opening it. Threads that only ask for a workaround, or report that there is none, are excluded. These are community suggestions, not official guidance from Anthropic — read the full thread before applying one.

Matching issues 101–200

Ranked by community engagement (reactions weighted over comments). Listing the top 300 of 974 matches; the statistics above cover all 974.

Related aggregations

  1. Security issues on macOS

    877 issues

  2. Security issues on Windows

    368 issues

  3. Security issues on VS Code

    112 issues

  4. Model behaviour issues on Linux

    2,108 issues

  5. Core CLI issues on Linux

    1,482 issues

  6. Terminal UI issues on Linux

    1,401 issues

  7. Tool calls issues on Linux

    705 issues

  8. MCP servers issues on Linux

    383 issues