›_ Claude Code Issues
Claude Code Issues / Platform areas / Security issues on Linux / Page 2

Security issues on Linux — page 2

Issues the maintainers labelled both platform:linux and area:security.

752 issues · 249 open · 503 resolved (67%) · first seen May 20, 2025

Is this getting better or worse?

This class of problem is still growing. 581 new reports in the last 90 days vs 45 in the 90 before — +1191%. The open backlog peaked at 381 in 2026-07 and sits at 249 today.

0 95 191 286 381 2025-052025-102026-032026-08
2025-05 — First reports2026-06 — Most new reports (284)2026-07 — Peak backlog (381 open)

Derived by counting each matching issue from its creation date until it closed. First-party computation over the anthropics/claude-code tracker — the trend is not published anywhere upstream.

Which builds report this

162 of these reports name the Claude Code build they were running, spanning 90 releases. Heaviest reporters:

Report volume, not a defect count: an issue can mention a build without that build having caused the failure. Versions come from the version string in the bug-report template, matched against real published tags.

Do these get fixed?

Median time to close is 46 days across 503 closures. Of the 503 closures with a recorded reason, 10% were closed as completed and 451 as not-planned or duplicate. The most recent completed fix landed in 2026-08.

Workarounds reported by the community

52 of these issues post a workaround someone says worked. The highest-engagement ones:

bypassPermissions mode not working in VS Code extension
issue was reproduced on after upgrade IDE-VSCODE-CC-01-v1: Workaround — bypassPermissions in VSCode Extension Linked rule: [IDE-VSCODE-CC-01-v1](IDE-VSCODE-CC-01-v1.md) Upstream: [anthropics/claude-code 20536]( --- Envir…
Found in the thread of #20536 · still open
[BUG] Linux sandbox broken - bad bwrap calls and no allow permissions
…ect root instead of protecting .git/HEAD, .git/config, etc. Workaround Added rooted patterns to .gitignore: /HEAD /config /hooks /objects /refs /.bash profile /.bashrc /.profile /.zprofile /.zshrc /.gitconfig /.gitmodule…
Found in the thread of #17727 · still open
[BUG] .claudeignore not ignoring private files
…oses such as software testing or inter agent documentation. Workarounds to this scenario include changing while the agents are working and restoring it when doing git operations, or allowing agents to ignore which leads…
Found in the thread of #16704 · resolved
[BUG] ask list is ignored when "Bash" is in allow list
…ands) and safety (protection against destructive commands). Workarounds attempted (none work) : - - Bypasses everything including ask list - - Prompts for every new command type
Found in the description of #6527 · still open
[FEATURE] GPU device passthrough in sandbox mode
I did end up with a workaround, but this would be a really good feature to support natively so trickery is not required. 1. Ensure ~/.local/bin/ is on your PATH before /usr/bin 2. Make ~/.local/bin/bwrap: 3. Relaunch cla…
Found in the thread of #13108 · still open

Excerpts are quoted from the linked issue so you can judge relevance before opening it. Threads that only ask for a workaround, or report that there is none, are excluded. These are community suggestions, not official guidance from Anthropic — read the full thread before applying one.

Matching issues 101–200

Ranked by community engagement (reactions weighted over comments). Listing the top 300 of 752 matches; the statistics above cover all 752.

Related aggregations

  1. Security issues on macOS

    699 issues

  2. Security issues on Windows

    255 issues

  3. Security issues on VS Code

    82 issues

  4. Model behaviour issues on Linux

    1,695 issues

  5. Core CLI issues on Linux

    1,380 issues

  6. Terminal UI issues on Linux

    1,252 issues

  7. Tool calls issues on Linux

    676 issues

  8. The API layer issues on Linux

    354 issues