{"data":{"id":"5c2f7466-89e6-4bf7-862a-7c78573b50c6","title":"CVE-2026-25722: Claude Code is an agentic coding tool. Prior to version 2.0.57, Claude Code failed to properly validate directory…","summary":"Claude Code, an agentic coding tool, failed to properly validate directory changes before version 2.0.57. Using the cd command to enter protected directories such as .claude let an attacker bypass write protection and create or modify files without user confirmation. Reliable exploitation required the ability to add untrusted content into the Claude Code context window.","solution":"This issue has been patched in version 2.0.57.","labels":["security"],"sourceUrl":"https://nvd.nist.gov/vuln/detail/CVE-2026-25722","publishedAt":"2026-02-06T18:15:59.077Z","cveId":"CVE-2026-25722","cweIds":["CWE-20","CWE-78"],"cvssScore":"9.1","cvssSeverity":"critical","severity":"critical","attackType":["other"],"issueType":"vulnerability","affectedPackages":["@anthropic-ai/claude-code@< 2.0.57 (fixed: 2.0.57)"],"affectedPackageNames":["@anthropic-ai/claude-code"],"affectedPackageRefs":["npm:@anthropic-ai/claude-code"],"affectedVendors":["Anthropic"],"affectedVendorsRaw":["Claude Code"],"classifierModel":"claude-haiku-5-5","classifierPromptVersion":"v4","summaryPromptVersion":"v2","headline":"Claude Code write protection bypass via cd into protected directories","headlinePromptVersion":"h1","cvssVector":null,"attackVector":null,"attackComplexity":null,"privilegesRequired":null,"userInteraction":null,"exploitMaturity":"unknown","epssScore":0.00509,"epssCheckedAt":"2026-11-04T06:10:15.563Z","kevDateAdded":null,"advisoryAliases":["GHSA-66q4-vfjg-2qhh"],"affectedPackagesSource":"ghsa","affectedPackagesCheckedAt":"2026-10-10T03:51:02.263Z","patchAvailable":true,"disclosureDate":null,"fixReleasedAt":"2025-12-03T04:52:56.549Z","daysToFix":-65,"fixCheckedAt":"2026-10-29T21:41:48.725Z","capecIds":["CAPEC-88"],"crossRefCount":0,"attackSophistication":"moderate","impactType":["integrity"],"aiComponentTargeted":"agent","llmSpecific":true,"classifierConfidence":0.9,"researchCategory":null,"atlasIds":null,"fixes":[{"ecosystem":"npm","name":"@anthropic-ai/claude-code","fixedVersion":"2.0.57","matchedVersion":"2.0.57","fixReleasedAt":"2025-12-03T04:52:56.549Z","daysToFix":-65,"match":"ecosystem","source":"registry","status":"found","checkedAt":"2026-10-29T21:41:48.576Z"}]}}