Tag
Researcher Aonan Guan disclosed a second Claude Code network sandbox bypass via HackerOne, exploiting a SOCKS5 hostname null-byte injection. The vulnerability affected versions 2.0.24 through 2.1.89 and was fixed silently twice, raising questions about the shared responsibility model for AI agents.