{"data":{"id":"45c99991-8760-4a1b-9618-a79d7a1885a4","title":"CVE-2025-64755: Claude Code is an agentic coding tool. Prior to version 2.0.31, due to an error in sed command parsing, it was possible…","summary":"CVE-2025-64755 affects Claude Code, an agentic coding tool, before version 2.0.31. An error in sed command parsing let an attacker bypass the read-only validation and write to arbitrary files on the host system. GitHub, Inc. assigned a CVSS 4.0 base score of 8.7 (High) and classified the weakness as CWE-78 (OS Command Injection).","solution":"Fixed in version 2.0.31.","labels":["security"],"sourceUrl":"https://nvd.nist.gov/vuln/detail/CVE-2025-64755","publishedAt":"2025-11-21T02:15:43.917Z","cveId":"CVE-2025-64755","cweIds":["CWE-78"],"cvssScore":"9.8","cvssSeverity":"critical","severity":"critical","attackType":["other"],"issueType":"vulnerability","affectedPackages":["@anthropic-ai/claude-code@< 2.0.31 (fixed: 2.0.31)"],"affectedPackageNames":["@anthropic-ai/claude-code"],"affectedPackageRefs":["npm:@anthropic-ai/claude-code"],"affectedVendors":["Anthropic"],"affectedVendorsRaw":["Claude Code"],"classifierModel":"claude-haiku-5-5","classifierPromptVersion":"v4","summaryPromptVersion":"v2","headline":"Claude Code read-only validation bypass via sed command parsing","headlinePromptVersion":"h1","cvssVector":null,"attackVector":null,"attackComplexity":null,"privilegesRequired":null,"userInteraction":null,"exploitMaturity":"unknown","epssScore":0.0062,"epssCheckedAt":"2026-11-04T06:10:14.410Z","kevDateAdded":null,"advisoryAliases":["GHSA-7mv8-j34q-vp7q"],"affectedPackagesSource":"ghsa","affectedPackagesCheckedAt":"2026-10-10T03:51:59.923Z","patchAvailable":true,"disclosureDate":null,"fixReleasedAt":"2025-10-31T21:19:12.609Z","daysToFix":-21,"fixCheckedAt":"2026-10-29T21:42:32.404Z","capecIds":["CAPEC-88"],"crossRefCount":0,"attackSophistication":"trivial","impactType":["integrity","confidentiality"],"aiComponentTargeted":"agent","llmSpecific":true,"classifierConfidence":0.95,"researchCategory":null,"atlasIds":null,"fixes":[{"ecosystem":"npm","name":"@anthropic-ai/claude-code","fixedVersion":"2.0.31","matchedVersion":"2.0.31","fixReleasedAt":"2025-10-31T21:19:12.609Z","daysToFix":-21,"match":"ecosystem","source":"registry","status":"found","checkedAt":"2026-10-29T21:42:32.255Z"}]}}