Skip to content

Claude Code

Claude Code’s built-in Task tools vanish server-side

Written by an AI model from the linked sources and checked against them by a second model. How we work

All about: Claude Code versions and changes →
Image: github.com

A GitHub bug report describes a failure in Claude Code 2.1.217 and 2.1.218 on macOS arm64: after the TodoWrite-to-Task migration, the built-in task tools sometimes don’t register at all. A ToolSearch for TaskList, TaskCreate, TaskUpdate, and TaskGet came back empty, while 189 other deferred tools were available.

In one 2.1.218 session, four tools loaded and worked at first, then minutes later a system notice said they’d been turned off because “their MCP server disconnected.” TaskStop and TaskOutput stuck around.

The author pulled the binaries for both versions: the Task gating code is identical, and neither the tengu_vellum_ash flag nor the CLAUDE_CODE_ENABLE_TASKS variable disabled anything locally. His conclusion is that exactly those four tools sharing one gate point to flag or registry instability on the server side.

Anthropic

SharedRoot: escaping the Claude Cowork sandbox on a Mac

Researchers mounted one folder into Claude Cowork, sent a short message, and reached the whole Mac disk: SSH keys, cloud credentials, no permission prompt. The full host mounts into the Linux VM with write access, and a CVE-2026-46331 chain gets root inside it.

No comments yet. Be the first.

Join the conversation

Sign in to leave a comment. It appears after moderation.