Coding & agents New
Claude Code 2.1.302 limits image reads and changes default permission behavior
Published:
Anthropic published stable Claude Code 2.1.302 on October 16 at 22:53 CEST. The release fixes the Read tool loading arbitrarily large images, or pipes and devices named like images, entirely into memory. Image sources larger than 128 MB are now refused.
The changelog says headless claude -p and Agent SDK sessions without an explicit permission mode now start in default mode on third-party providers, with telemetry off or on a fresh install; explicitly selecting auto mode keeps it. A separate setting, CLAUDE_CODE_AUTO_MODE_MODEL, chooses the client-side auto-mode classifier model and does not change the server-side classifier.
The release also fixes MCP servers returning no tools or failing calls when negotiating protocol version 2026-07-28 without resultType, ttlMs or cacheScope. It fixes cloud-session scheduled runs unexpectedly restarting an hour or more after a partial failure, a behavior the changelog says could repeat work such as posting a report twice.
Caveat. These are vendor-documented changes, not a security audit or an installation recommendation. We verified the official release metadata and notes; we did not install the version or reproduce every fix. Codex 0.164.0 builds found this morning are prereleases with sparse notes, not a verified stable feature launch.
Sources