AI library

Source · release

Claude Code releases 2.1.321 and 2.1.322

Author
Anthropic
Published
9 November 2026
Added
10 November 2026
Original
https://github.com/anthropics/claude-code/releases/tag/v2.1.321

Summary

Claude Code 2.1.321 (2026-11-09) adds Claude Fable 5.2 as the default Fable model and moves saved Fable 5.1 picks to it. It adds a settings file option for claude remote-control, changes how mods (Claude-written plugins) are approved, and fixes a long list of bugs, including an MCP OAuth secret leak and several permission bypasses. 2.1.322 (2026-11-10) adds fast mode on Vertex AI.

Key points

  • Fable 5.2: claude-fable-5-2 is the default Fable model ($8 / $40 per million tokens, $0.20 cache reads, 1M context). Saved Fable 5.1 choices move to fable (at once on Pro and Max; on Team and Enterprise once the organization allows it); /model claude-fable-5-1 switches back.
  • Fast mode on Vertex (2.1.322): works in the global, us, and eu regions and falls back to standard speed if Vertex refuses it. Since 2.1.321, a rate-limited fast mode first retries at standard speed on the same model instead of switching models.
  • claude remote-control --settings <file>: applies a settings file to every session it starts. Restart claude remote-control after editing the file.
  • Mods: mods that Claude writes now turn on without asking in auto and bypass modes, and do not load in dontAsk mode. A mod's own tool calls ($.tool.call, $.mcp.call) raise no permission prompt, though deny rules and organization policy still apply. Headless sessions reload mods in .claude/skills when files change (CLAUDE_CODE_PLUGIN_DIR_WATCH=0 turns this off).
  • Security fixes: MCP OAuth could send refresh tokens to another host after a redirect; a read-only Bash command could run outside the sandbox without a prompt; deny rules and protected-file prompts missed the target of cp/mv into a directory (and /bin/cp style paths now get the same checks); a PreToolUse hook's ask could be lost when another hook deferred.
  • Skill loading: .claude/skills folders inside ~/.claude/plugins no longer load when Claude works on files there. Project skills that vanish and return mid-session (for example after git stash) now reappear.
  • Context savings: background command notifications and TaskStop results show only the start and end of commands over 1,000 characters.
  • Headless: claude -p now exits 1 with an error when transcript lines are lost on a full NFS export, and no longer tells Claude background commands get 30 minutes when they stop after 10.
  • The official marketplace's security-guidance plugin reached 2.0.19 the same day (commit feed, 2026-11-10), with fixes to its commit reviewer and rule counting.

Why it matters

The upgrade brings the new Fable model and closes an MCP OAuth token leak and several permission gaps, so it is worth installing promptly. Teams that let Claude write mods should note that mods now switch on without asking in auto and bypass modes.