Claude Code v2.1.162: Security Fix for OAuth Credential Leak, Parallel Tool Call Isolation
Anthropic
Claude Code v2.1.162 (June 3) adds a `waitingFor` field to `claude agents --json`, parallel tool call isolation (failed Bash no longer cancels other calls in the same batch), and fixes for WebFetch permission rules, Windows path handling, and a regression that could leak OAuth credentials to custom API gateways.
Why it matters
The OAuth credential leak fix is security-critical for users running Claude Code behind custom API gateway configurations.
Importance: 2/5
Official GitHub release; security fix for OAuth credential exposure in custom gateway setups.