ResearchBuzz: FirehoseThe Register: Claude Code bypasses safety rule if given too many commands . “Claude Code will ignore its deny rules, used to block risky actions, if burdened with a sufficiently long chain of subcommands. This vuln leaves the bot open to prompt injection attacks.”
https://rbfirehose.com/2026/04/07/the-register-claude-code-bypasses-safety-rule-if-given-too-many-commands/