A security company found secrets in 1,122 public copies of Claude Code’s settings.local.json, where commands approved with ‘Yes, and don’t ask again’ can be saved verbatim.
Claude Code's 'Don't Ask Again' File Exposes Passwords and Keys in 1,122 Public Copies on GitHub
A security company found secrets in 1,122 public copies of Claude Code's settings.local.json, where commands approved with 'Yes, and don't ask again' can be saved verbatim.
Source: Slashdot