Claude Code flaws allow remote code execution and API key theft via untrusted repositories; three bugs fixed across 2025–2026 releases.
AI assistants apparently can't distinguish between instructions and data, and that is at the center of many zero-click prompt ...