21:53
2026-08-18
blogs.zethian.com
ai-tools
When deny doesn't win: least-privilege permissions for Claude Code
Anthropic's Claude Code lacks a way to express least-privilege permissions, allowing a poisoned issue to turn an allowed shell into an SSH-key exfiltration path, according to a blog post by Saleem Mir…