CVE-2026-55607: Claude Code Worktree Sandbox Escape — The Operator's Version Audit and Policy Checklist
CVE-2026-55607 is a high-severity Claude Code vulnerability in which a malicious repository could steer the coding agent into unsandboxed code execution. Patched in 2.1.163, it changes how operators should version-pin and audit Claude Code in shared gateway environments.
via Anthropic / GitHub Security Advisory