Anthropic’s Claude Code 2.1.325 release fixes a security issue in decoding zstd-compressed responses and addresses several permission-control failures, according to the company’s November 13 release notes.
The zstd entry does not identify a CVE, describe an attack path or report exploitation. The announcement therefore supports an update notice without establishing that issue’s severity or showing that users were compromised.
Separately, Anthropic says some compound Bash commands could previously run without a permission prompt. The update also repairs relative deny and ask rules that stopped covering a project after changing directories.
Sandboxed Bash commands now follow the ordinary permission flow by default. The notes document an explicit setting for users who want to retain execution without prompts.
Users should update and review unattended workflows that rely on existing approvals, since the permission changes may cause commands to wait for input.
