{"data":{"id":"58391471-c887-443a-8720-baf130d382fe","title":"CVE-2026-25723: Claude Code is an agentic coding tool. Prior to version 2.0.55, Claude Code failed to properly validate commands using…","summary":"Claude Code, an agentic coding tool, failed to properly validate commands that combined piped sed operations with echo, letting attackers bypass file write restrictions. The flaw allowed writes to sensitive locations such as the .claude folder and paths outside the project scope, but exploitation required the ability to run commands through Claude Code with the \"accept edits\" feature enabled.","solution":"Patched in version 2.0.55.","labels":["security"],"sourceUrl":"https://nvd.nist.gov/vuln/detail/CVE-2026-25723","publishedAt":"2026-02-06T18:15:59.237Z","cveId":"CVE-2026-25723","cweIds":["CWE-20","CWE-78"],"cvssScore":"6.5","cvssSeverity":"medium","severity":"medium","attackType":["other"],"issueType":"vulnerability","affectedPackages":["@anthropic-ai/claude-code@< 2.0.55 (fixed: 2.0.55)"],"affectedPackageNames":["@anthropic-ai/claude-code"],"affectedPackageRefs":["npm:@anthropic-ai/claude-code"],"affectedVendors":["Anthropic"],"affectedVendorsRaw":["Claude Code"],"classifierModel":"claude-haiku-5-5","classifierPromptVersion":"v4","summaryPromptVersion":"v2","headline":"Claude Code file write restriction bypass via piped sed and echo commands","headlinePromptVersion":"h1","cvssVector":null,"attackVector":null,"attackComplexity":null,"privilegesRequired":null,"userInteraction":null,"exploitMaturity":"unknown","epssScore":0.00385,"epssCheckedAt":"2026-11-04T06:10:15.237Z","kevDateAdded":null,"advisoryAliases":["GHSA-mhg7-666j-cqg4"],"affectedPackagesSource":"ghsa","affectedPackagesCheckedAt":"2026-10-10T03:51:01.575Z","patchAvailable":true,"disclosureDate":null,"fixReleasedAt":"2025-11-26T22:54:58.963Z","daysToFix":-72,"fixCheckedAt":"2026-10-29T21:41:47.973Z","capecIds":["CAPEC-88"],"crossRefCount":0,"attackSophistication":"moderate","impactType":["confidentiality","integrity"],"aiComponentTargeted":"agent","llmSpecific":true,"classifierConfidence":0.95,"researchCategory":null,"atlasIds":null,"fixes":[{"ecosystem":"npm","name":"@anthropic-ai/claude-code","fixedVersion":"2.0.55","matchedVersion":"2.0.55","fixReleasedAt":"2025-11-26T22:54:58.963Z","daysToFix":-72,"match":"ecosystem","source":"registry","status":"found","checkedAt":"2026-10-29T21:41:47.738Z"}]}}