Claude Code v2.1.214 closes a Bash permission bypass

The v2.1.214 patch focuses on command permission checks. The headline fix: a permission bypass in Windows PowerShell 5.1 sessions is gone. Commands longer than 10,000 characters now always ask for confirmation instead of running automatically.

A few more hardening changes:

• Bash checks no longer treat zsh variable substitutions inside [[ ]] comparisons as inert text, so those commands now require confirmation • An Edit(src/**) rule no longer approved writes to nested dir/ directories across the whole tree • Remote sessions could pass checks before the local confirmation dialog was answered

The patch also adds an EndConversation tool that lets Claude terminate sessions on especially aggressive behavior and jailbreak attempts, the same way claude.ai has since 2025.