chiprook
← Security
SecurityOctober 17, 2026, 05:02

Claude Code 2.1.299 fixes MCP server name collision in permission rules

Claude Code 2.1.299, released October 14, 2026, fixes a bug where an allow rule mcp__a also matched a server named a__b, since server names may contain double underscores. Allow rules now reach only the named server, and deny and ask rules correctly apply to names with double underscores.

Claude Code 2.1.299 fixes MCP server name collision in permission rules
#Anthropic#Claude
Read next
Security

Google, JPMorgan and two governments fixed the same MCP flaw

Security

MCP SDK OAuth fix audit: patching alone leaves the hole open

Security

Fake REA repo distributed a trojan posing as an MCP server

Security

Radware launches MCP Server Protection for AI agents