Sensitive Credentials Stored in Plaintext by Claude Code

• •Claude Code stores sensitive credentials in plaintext in .claude/settings.local.json.
• •Approved commands with API keys and tokens are permanently stored without sanitization.
• •This vulnerability poses significant risks of unauthorized access to production systems.

Claude Code has been found to store approved bash commands containing sensitive credentials in plaintext within the local settings file (.claude/settings.local.json). Users who approve commands with API keys or tokens inadvertently allow these credentials to be permanently stored without any sanitization. This poses significant security risks, as these credentials can be accessed by unauthorized users, potentially leading to unauthorized access to production systems. The issue was highlighted in a recent GitHub issue report, which emphasizes the need for sanitization or exclusion of sensitive data from the auto-approval list. There are no known CVEs associated with this issue as of now, but the implications for security practices are severe. Organizations using Claude Code are advised to review their configurations to prevent credential leakage.