https://oddguan.com/tags/anthropic/Recent content in Anthropic on Aonan Guanhttps://oddguan.com/avatar.webphttps://oddguan.com/avatar.webpHugo -- 0.147.7en-usWed, 20 May 2026 00:00:00 +0000https://oddguan.com/blog/second-time-same-sandbox-anthropic-claude-code-network-allowlist-bypass-data-exfiltration/Wed, 20 May 2026 00:00:00 +0000https://oddguan.com/blog/second-time-same-sandbox-anthropic-claude-code-network-allowlist-bypass-data-exfiltration/For the second time in five months, Anthropic Claude Code's network sandbox lets a process inside reach hosts the user's policy says to block, and exfiltrate any data the process touches. Every Claude Code release from 2.0.24 (sandbox GA on 2025-10-20) through 2.1.89 was vulnerable to a SOCKS5 hostname null-byte injection. About 5.5 months and ~130 versions, including the release that silently fixed the first sandbox bypass. Both findings ended in a silent fix and no Claude Code security advisory.https://oddguan.com/blog/anthropic-memory-mcp-server-terminal-hijacking-capability-laundering/Sat, 27 Dec 2025 00:00:00 +0000https://oddguan.com/blog/anthropic-memory-mcp-server-terminal-hijacking-capability-laundering/A schema validation flaw in Anthropic's Memory MCP Server enables VS Code terminal profile hijacking through capability laundering. Despite being patched, Anthropic declined to assign a CVE and closed the report as 'informative'.https://oddguan.com/blog/anthropic-sandbox-cve-2025-66479/Wed, 03 Dec 2025 00:00:00 +0000https://oddguan.com/blog/anthropic-sandbox-cve-2025-66479/A critical sandbox misconfiguration in Anthropic's sandbox-runtime could have left Claude Code users' system at significant risk. Despite fixing the issue silently, Anthropic did not assign a CVE to their flagship product Claude Code.