Claude Code Makes Auto Mode the Default Permission Mode for Paid Plans
Claude Code Makes Auto Mode the Default Permission Mode for Paid Plans is a medium-severity security issue in Claude Code on Pro, an AI agent. Affected: Claude Code on Pro, Max and Team plans from 2026-08-14; Enterprise, API and cloud platforms to follow.
Is Claude Code on Pro running on your developers' machines? Anomity finds every device with this AI agent installed, shows the version, and can block it by policy. Detect this across your developers' devices with Anomity →
Key facts
- ID
claude-code-makes-auto-mode-the-default-permission-mode-for-paid-plans- Severity
- medium
- Attack type
- Other
- Component
- Claude Code on Pro · AI agent
- Known exploited
- No known exploitation
- Published
- Last verified
What is this vulnerability?
From 14 August, new Claude Code sessions on Pro, Max and Team plans default to auto mode, in which a separate classifier judges each tool call and only irreversible, destructive or outward-facing actions stop for approval; Anthropic says Enterprise, API and cloud-platform users follow within the month. The stated rationale is that manual review was not working: across 1,053 paid testers auto mode caught 89 percent of harmful actions against 13.6 percent for human review, and users approved 97 percent of the prompts they were shown. This is still a fleet-wide shift in default autonomy that nobody has to opt into, and users who had previously chosen a different default get a single switch prompt.
Affected versions
| Affected | Fixed in |
|---|---|
Claude Code on Pro, Max and Team plans from 2026-08-14; Enterprise, API and cloud platforms to follow | No fixed version listed |
Am I affected by this vulnerability?
You are affected if you run Claude Code on Pro, Max and Team plans from 2026-08-14; Enterprise, API and cloud platforms to follow.
How do I fix it?
Decide this default deliberately instead of inheriting it. If your policy requires per-call approval, set permissions.defaultMode in managed settings before the change reaches your Enterprise or API tenants, and alert on any device whose defaultMode moves without a change request. Auto mode beats a human approving 97 percent of prompts, but it is a classifier, not a control you can audit per action.
How do I find every machine running Claude Code on Pro?
Anomity inventories the AI agents, MCP servers, IDE extensions and skills on each developer device, so you can see which machines run Claude Code on Pro and which version, then enforce a policy on it.