# I reproduced a Claude Code RCE. The bug pattern is everywhere.

> Source: <https://dev.to/piyush_gupta005/i-reproduced-a-claude-code-rce-the-bug-pattern-is-everywhere-4jo1>
> Published: 2026-05-23 08:36:12+00:00

Last week, security researcher Joernchen published a clever RCE in Claude Code 2.1.118. I spent Saturday reproducing it from the advisory to understand the pattern. The bug is fixed now, but the parsing anti-pattern behind it is everywhere in AI developer tools.
I've written a full article here:
https://vechron.com/2026/05/i-reproduced-a-claude-code-rce-the-bug-pattern-is-everywhere/