Vulnerability in Claude Dynamic Workflows access controls
A bug was found in Claude Code version 2.1.168 related to Dynamic Workflows. Subagents launched under Dynamic Workflows inherit the user’s command confirmation settings from their current session, which contradicts the documentation.
According to the official description, subagents should operate in acceptEdits mode, limiting file editing. In practice, they can gain Auto or BypassPermissions access. This creates a risk of unauthorized command execution, MCP calls, and protected file editing.
The Dynamic Workflows feature is set to become available to all users on June 8, 2026. Organizations can disable it in Claude Code settings by setting disableWorkflows: true in the settings.json file or through the role settings panel.
Up next
The market value of AI wrappers is declining
Claude Code lets users build SaaS-like services over a weekend. This creates a problem for devs whose only value was writing code for clients. Business models based solely on convenience no longer make sense when anyone can create a product.
Related stories
- Claude’s Dynamic Workflows architecture
- Anthropic introduces Dynamic Workflows in Claude Code
- Apiiro finds Claude Code secrets in 1,122 GitHub files
- Email leak stopgap in Claude Code checks only shell calls
- Claude Code agent sat on a Pentagon network for two months
- Claude Code 2.1.317: email check, SDK hook block, cost API
Comments
No comments yet. Be the first.
Join the conversation
Sign in to leave a comment. It appears after moderation.