Apple

China’s National Vulnerability Database (NVDB) has instructed developers to uninstall or upgrade specific versions of Anthropic’s coding assistant, Claude Code.&nbsp;
Claude Code was flagged as a security risk following allegations that the tool sends user data to remote servers without consent.&nbsp;
<h3 id="span-is-using-claude-code-dangerous-span">Is using Claude Code dangerous?&nbsp;</h3>
Anthropic’s coding assistant Claude Code has had its versions 2.1.91 through 2.1.196 flagged as a security risk by China’s National Vulnerability Database (NVDB), days after Alibaba <a href="https://www.cryptopolitan.com/alibaba-anthropic-ai-internal-security-audit/" rel="noopener noreferrer nofollow">reportedly barred staff</a> from using the same software.
Claude Code allegedly contains a monitoring mechanism that is built into its system. This mechanism can automatically transmit sensitive data, including a user’s region and identity identifiers, to remote servers.&nbsp;
The <a href="https://en.wikipedia.org/wiki/China_National_Vulnerability_Database" rel="noopener noreferrer nofollow">NVDB</a>, which sits under China’s Ministry of Industry and Information Technology (MIIT), <a href="https://cnvdb.org.cn/announcement/2074682031259299842" rel="noopener noreferrer nofollow">did not share the details</a> on how it identified the alleged backdoor. Anthropic has yet to publicly respond to the specific claim.&nbsp;
Chinese organizations have been advised to disconnect the affected versions from development machines, move to fixed versions of the coding assistant, and closely monitor any coding tools that are connected outside a company’s core network.
<h3 id="span-why-did-china-flag-claude-code-now-span">Why did China flag Claude Code now?</h3>
The NVDB warning follows a period of increased tension between Anthropic and Chinese AI developers.&nbsp;
In February, <a href="https://www.anthropic.com/news/detecting-and-preventing-distillation-attacks" rel="noopener noreferrer nofollow">Anthropic stated</a> that it does not sell commercial access to Claude in China for national security reasons, and that Chinese labs, including DeepSeek, Moonshot, and MiniMax had used fraudulent accounts and proxy services to reach its models anyway.&nbsp;
U.S. chips and Apple software have also been accused of having “backdoors” built into them, while <a href="https://www.cryptopolitan.com/anthropic-tightens-security/" rel="noopener noreferrer nofollow">Anthropic</a> has argued that models copied from American systems could have their safety features removed and then be used for surveillance.
The smartest crypto minds already read our newsletter. Want in? <a href="https://www.cryptopolitan.com/newsletters/?utm_source=cp&amp;utm_medium=web&amp;utm_campaign=inlineAds" rel="noopener noreferrer nofollow">Join them</a>.

China's vulnerability database warns of backdoor in Anthropic's Claude Code

Table of Contents

Cryptopolitan_News

Other articles published on Jul 8, 2026

Join our free newsletter for daily crypto updates!