Claude Code v2.1.223 fixes permission-bypass gap, merges /code-review
Anthropic
Following v2.1.222's worktree-isolation and hook-bypass fixes reported yesterday, Anthropic shipped v2.1.223, closing a Bash permission-check bypass reachable via crafted/padded commands and a bypassPermissions policy gap. The release also merges /review into /code-review and changes auto-compaction to reliably hold 1M-context models to a 200K window.
Why it matters
Closes a real permission-check bypass rather than just adding features, which matters for anyone running Claude Code with elevated or auto-approved permissions.
Importance: 2/5
Follow-up patch closing a real security gap, continuing yesterday's worktree-isolation fixes.
Sources
official
Claude Code changelog
official
Claude Code v2.1.223