dev.to· Oct 19, 2026· by gabrielanhaia

Claude Code 2.1.296 Could Run an Approved Tool Call Twice. Pin Your Agent's Version

Open Original Article ↗
Claude Code 2.1.296 could run an approved tool call twice in cloud and headless sessions. Pin your agent and let one machine try each new version first.
🎯 Vulnerability: Web Security Vulnerability
💡 Defense Fix: Implement strict input validation, contextual output encoding, and enforce least-privilege authorization controls.
#ai#security#devtools#discuss