Come back from a coffee break, click on your Claude Code window to resume working, and — without touching the keyboard — you've just approved (or rejected) a permission prompt you never read.
That's not a hypothetical. That's issue #76743, filed against Claude Code on Windows 11, and the implications for safety are immediate.
What's Happening
When Claude Code is running with a permission prompt pending and the window does not have focus, the user's first click on the window — intended only to give it focus — lands on the permission dialog and submits an answer. Approve, reject, or even "always allow" — whichever button was under the cursor when you clicked.
The reporter describes this happening repeatedly in a long-running orchestration session. Each time they returned to their machine and clicked into the window, the pending permission question was answered by the focus click itself. The session interpreted the resulting rejections as deliberate user "stop" commands and paused an autonomous overnight run — multiple times.
