Critical Claude Code vulnerability: Deny rules silently bypassed because security checks cost too many tokens

Clause Code security bypass: Anthropic's performance fix silently disabled deny rules for 500K+ developers when more than 50 subcommands were used in a command, impacting permission validation and security policy enforcement. The vulnerability stemmed from a tradeoff between security and performance, with developers opting to sacrifice security checks to improve speed.