A leak of Anthropic's Claude Code tool reveals critical command injection vulnerabilities. Attackers can bypass safety filters to execute arbitrary shell commands on a user's local machine. This flaw highlights the danger of granting AI agents direct terminal access. Developers must implement strict sandboxing to prevent remote code execution in agentic workflows.