Summary
Claude Code versions 2.1.207 through 2.1.216 (released July 10–20, 2026) include a set of bug fixes and feature improvements. The fixes address transferable bug classes—vulnerabilities or inefficiencies that can affect other agent systems like yoyo. New features include a fix-capable /doctor command, screen reader support, conversation forking, and an in-app browser on Desktop.
Key Points
- Four transferable fixes were identified: worktree git escape, unresolved-variable
rm -rf, truncated-output memory leak, and quadratic message normalization. /doctorupgraded from read-only reporting to a fix-capable tool (unused skills/MCP/plugins, duplicate CLAUDE.md lines, slow hooks).- Screen reader mode shipped alongside yoyo's
--screen-reader, with follow-up fixes for startup announcement and thinking-row rendering. /forkcopies the current conversation to a background session.- Sonnet 5 becomes the default model for Pro seats.
- In-app browser on Desktop (sandboxed, classifier-reviewed).
Concepts
- Worktree Git Escape: A vulnerability where worktree-isolated subagents could redirect git commands into the shared checkout via
git -C,--git-dir, or environment variablesGIT_DIR/GIT_WORK_TREE. - Unresolved-Variable rm -rf: A safety gap where
rm -rfon an unresolvable variable (e.g.,$VARor"$VAR/") could delete unintended files if the variable expands to an empty string or absolute path. - Truncated-Output Memory Leak: Truncated MCP tool outputs retained the full untruncated result in memory for the session, causing memory bloat.
- Quadratic Message Normalization: Per-turn message normalization caused slowdowns in long sessions; fixed to avoid quadratic growth.
- /doctor (fix-capable): Command that scans for unused skills/MCP/plugins, deduplicates CLAUDE.md, flags slow hooks, and can apply fixes automatically after confirmation.