{"data":{"id":"89db0746-aa73-4b28-8361-ff9fa7560dca","title":"CVE-2026-88968: Claude Code is an agentic coding tool. Prior to 2.1.251, the Edit tool validates a target using pathname and symlink…","summary":"Claude Code versions before 2.1.251 have a flaw in the Edit tool, which validates target paths by pathname and symlink resolution without binding them to the directory inode or file descriptor. On macOS, code running in the Bash sandbox can atomically replace an in-workspace parent directory with a symlink after validation, so the unsandboxed Edit implementation overwrites a user-writable file outside the workspace. Exploitation requires attacker-controlled code to run inside the sandbox, such as from a malicious repository or dependency script.","solution":"Fixed in version 2.1.251.","labels":["security"],"sourceUrl":"https://nvd.nist.gov/vuln/detail/CVE-2026-88968","publishedAt":"2026-11-03T20:18:19.010Z","cveId":"CVE-2026-88968","cweIds":["CWE-59","CWE-367"],"cvssScore":null,"cvssSeverity":null,"severity":"high","attackType":["supply_chain","other"],"issueType":"vulnerability","affectedPackages":null,"affectedPackageNames":null,"affectedPackageRefs":null,"affectedVendors":["Anthropic"],"affectedVendorsRaw":["Claude Code"],"classifierModel":"claude-haiku-5-5","classifierPromptVersion":"v4","summaryPromptVersion":"v2","headline":"Claude Code Edit tool symlink race overwrites files outside workspace on macOS","headlinePromptVersion":"h1","cvssVector":null,"attackVector":null,"attackComplexity":null,"privilegesRequired":null,"userInteraction":null,"exploitMaturity":"unknown","epssScore":0.00317,"epssCheckedAt":"2026-11-04T18:09:13.409Z","kevDateAdded":null,"advisoryAliases":null,"affectedPackagesSource":null,"affectedPackagesCheckedAt":"2026-11-04T00:12:28.069Z","patchAvailable":null,"disclosureDate":"2026-11-03T20:18:19.010Z","fixReleasedAt":null,"daysToFix":null,"fixCheckedAt":null,"capecIds":["CAPEC-27"],"crossRefCount":0,"attackSophistication":"advanced","impactType":["integrity","confidentiality"],"aiComponentTargeted":"agent","llmSpecific":true,"classifierConfidence":0.9,"researchCategory":null,"atlasIds":["AML.T0010"],"fixes":[]}}