Claude Code 2.1.321 adds Fable 5.2 as the default Fable model and fixes MCP OAuth and sandbox leaks

Claude Code v2.1.321, released November 9, 2026, per its release notes:

• Model: adds Claude Fable 5.2 (claude-fable-5-2) as the default Fable model, with 1M context at $8/$40 per million tokens and $0.20 per million for cache reads. Saved Fable 5.1 picks move to Fable 5.2 at once on Pro and Max plans, and on Team and Enterprise plans once the organization allows it; /model claude-fable-5-1 switches back. The fast mode labels in /fast, /config and /model now name the current model when it supports fast mode, and fast mode that is rate-limited, overloaded or failing now tries standard speed on the same model first.
• Security fixes: MCP OAuth requests no longer send secrets such as refresh tokens to another host when a server redirects them; a read-only Bash command no longer runs outside the sandbox without a permission prompt; Bash permission checks no longer judge a file write from the wrong folder; deny rules and protected-file prompts now apply to the file a cp or mv into a directory writes (and cp/mv spelled by a path such as /bin/cp get the same checks).
• Remote Control: claude remote-control gains --settings <file>, applied to every session it starts (a changed file takes effect only after restarting it); sessions now keep the folder they were started in, and a connected client can no longer move one.
• Behavior changes: mods Claude writes turn on without asking in auto and bypass modes and do not load in dontAsk mode, and their own tool calls raise no permission prompt (deny rules and organization policy still apply); managed extraKnownMarketplaces entries cannot be added from another source; .claude/skills folders inside ~/.claude/plugins no longer load; the account email check now refuses only a shell command that holds the user's email and names a User-Agent; Claude apps gateway upstreams for Bedrock, Vertex and Foundry ignore ANTHROPIC_*_BASE_URL variables in the gateway's environment, and policy_mode: layered now adds up managed MCP servers over every matching policy.
• Other: the "Upgrade to Max" options now say "Upgrade to Max or Ultra", claude -p on Linux now exits 1 with an error when transcript lines are lost to a full NFS export, and start-up and install are faster.

The release also carries many other fixes for the VS Code extension, Windows, cloud sessions, screen reader mode and the desktop app.