Feb 262026 Claude Code Flaws Allow Remote Code Execution and API Key Exfiltration Claude Code flaws allow remote code execution and API key theft via untrusted repositories; three bugs fixed across 2025–2026 releases.