Security researchers at Apiiro discovered Claude Code's local settings files are being committed to public GitHub repositories, leaking database passwords, API tokens, and root logins. The issue arises because commands approved via 'Yes, and don't ask again' are stored verbatim in .claude/settings.local.json, which relies only on a global .gitignore that may not apply across different environments.
Background
Claude Code is Anthropic's AI-powered coding assistant built on top of Claude, designed to automate software development tasks through natural language interaction. It runs locally and can execute shell commands with user approval.
- Source
- Ars Technica
- Published
- Nov 10, 2026 at 01:24 AM
- Score
- 6.0 / 10