Claude Code v2.1.268 fixes HTTP 400 regression and symlink permission bypass
Anthropic
Following v2.1.267 (Sep 9, covered yesterday), Anthropic shipped Claude Code v2.1.268 (Sep 10). It fixes a critical regression where every turn failed with HTTP 400 on third-party Anthropic-compatible endpoints (ANTHROPIC_BASE_URL) since 2.1.265, closes symlink-based deny/ask permission bypasses for protected directories (/etc, /tmp, /var, /bin), adds gateway pricing sync and plugin CLI --json output, and fixes a busy-loop CPU pin in idle sessions.
Why it matters
Both releases touch security-relevant permission enforcement (symlinks, marketplace paths) that the permission system depends on, and the gateway features signal Claude Code's push into enterprise deployments.
Importance: 2/5
Patch release with security-relevant permission fixes