chiprook
← Security
SecurityOctober 29, 2026, 18:10

Bracketed paste leaks ESC[201~ and cuts off pastes into AI agents

A write-up shows bracketed paste mode (2004) does not protect against a fake ESC[201~ sequence: if it is in the clipboard, a terminal may pass it to agents like Claude Code, and the rest of the paste arrives as typed input. st still forwards ESC unfiltered, while xterm, Konsole and VTE strip or replace it.

Bracketed paste leaks ESC[201~ and cuts off pastes into AI agents
#ClaudeCode#Codex
Read next
Security

AGENTS.md in Downloads folder can hijack AI coding agents

AI

Infini-AI-Lab releases Hermit, an open-source harness adapter framework for AI agents

AI

Context Mode MCP server cuts AI coding agent context use

AI

Outside evaluators found ways OpenAI's agents could slip past its monitor