Anthropic Claude Code v2.34.2 Security Patch: RCE, OIDC, and DoS Fixes

Vulnerability Overview v2.34.2 [SECURITY] is a security patch release designed to fix multiple security vulnerabilities. This release was responsibly disclosed under Anthropic’s Project Glasswing Coordinated Vulnerability Disclosure Program. Impact Scope OIDC Email Fallback to First Account Link: Restrict OIDC email fallback to the first account link. Validate HostnameSuffix and SSHConfigOptions: Validate HostnameSuffix and SSHConfigOptions. Reject OIDC Login: Reject OIDC login when the claim is or missing. Escape Proxy Log HTML: Escape HTML in proxy logs. Escape Appearance Values in HTML Output: Escape appearance values in HTML output. Sub-Agent API Template Part Sharing Level: Restrict template part sharing levels in the sub-agent API. Random Values for Mock Hashes: Use random values for mock hashes of built-in users. Rebuild Development Container Permissions: Permissions need to be updated to rebuild the development container. Workspace Owner Matches App Username: Validate that the workspace owner matches the app username. TLS for Albriidgeproxy Upstream Transport: Always validate TLS for Albriidgeproxy upstream transport. Active Users in Albriidge Authentication: Check if the user is active in Albriidge authentication. Albriidge Max Bytes Request Limit: Add a max bytes request limit to Albriidge. Prevent User Admin from Resetting Owner Password: Prevent user admins from resetting the owner password. Prevent OOM DoS: Validate file size in the new data builder to prevent OOM DoS. Reject Oversized and Invalid ZIP Uploads: Reject oversized and invalid ZIP uploads. Prevent Cross-Tenant Workspace Rebinding: Prevent cross-tenant workspace rebinding. Prevent Command Injection in Shell Execution: Prevent command injection in shell execution. Validate Agent-Provided AllowedIPs in Coordinator: Validate the AllowedIPs provided by the agent in the coordinator. Trust x-forwarded-host Only from Configured Trusted Proxy: Trust the x-forwarded-host header only from the configured trusted proxy. Prevent Session Token Leakage via External App URL: Prevent session token leakage via external application URLs. Remediation OIDC Email Fallback to First Account Link: Restrict OIDC email fallback to the first account link. Validate HostnameSuffix and SSHConfigOptions: Validate HostnameSuffix and SSHConfigOptions. Reject OIDC Login: Reject OIDC login when the claim is or missing. Escape Proxy Log HTML: Escape HTML in proxy logs. Escape Appearance Values in HTML Output: Escape appearance values in HTML output. Sub-Agent API Template Part Sharing Level: Restrict template part sharing levels in the sub-agent API. Random Values for Mock Hashes: Use random values for mock hashes of built-in users. Rebuild Development Container Permissions: Permissions need to be updated to rebuild the development container. Workspace Owner Matches App Username: Validate that the workspace owner matches the app username. TLS for Albriidgeproxy Upstream Transport: Always validate TLS for Albriidgeproxy upstream transport. Active Users in Albriidge Authentication: Check if the user is active in Albriidge authentication. Albriidge Max Bytes Request Limit: Add a max bytes request limit to Albriidge. Prevent User Admin from Resetting Owner Password: Prevent user admins from resetting the owner password. Prevent OOM DoS: Validate file size in the new data builder to prevent OOM DoS. Reject Oversized and Invalid ZIP Uploads: Reject oversized and invalid ZIP uploads. Prevent Cross-Tenant Workspace Rebinding: Prevent cross-tenant workspace rebinding. Prevent Command Injection in Shell Execution: Prevent command injection in shell execution. Validate Agent-Provided AllowedIPs in Coordinator: Validate the AllowedIPs provided by the agent in the coordinator. Trust x-forwarded-host Only from Configured Trusted Proxy: Trust the x-forwarded-host header only from the configured trusted proxy. Prevent Session Token Leakage via External App URL: Prevent session token leakage via external application URLs. Additional Information Changelog: This is a main branch Coder version. Enterprise users without a staging environment are advised to install the latest stable version until this version is refined. Features: CLI support for providing temporary arguments on workspaces. Bug fixes: Renamed bundled to and added a real RStudio icon; suppressed AI governance seat count errors; preserved Gemini thinking signatures; allowed lifecycle code paths to retry failed stop jobs. Chores: Upgraded Go to 1.26.4 in . Container image: Install/upgrade: Refer to the documentation to install or upgrade Coder, or use the release assets.

Goal Reached Thanks to every supporter — we hit 100%!

Anthropic Claude Code v2.34.2 Security Patch: RCE, OIDC, and DoS Fixes

More from this source