MediumVulnerabilityLLM-specific
CVE-2026-25723: Claude Code file write restriction bypass via piped sed and echo commands
- Source
- NVD(opens in a new tab)
- Identifier
- CVE-2026-25723
- Published
- Record updated
- Affected
- @anthropic-ai/claude-code < 2.0.55
- Fixed in
- 2.0.55
- released November 26, 2025, 72 days before disclosure
- Known exploitation
- Not listed in the CISA Known Exploited Vulnerabilities catalog at the last check.
- EPSS
- 0.4%
Summary
Claude Code, an agentic coding tool, failed to properly validate commands that combined piped sed operations with echo, letting attackers bypass file write restrictions. The flaw allowed writes to sensitive locations such as the .claude folder and paths outside the project scope, but exploitation required the ability to run commands through Claude Code with the "accept edits" feature enabled.
Mitigation
Patched in version 2.0.55.
Topics
Related items
- HighCVE-2026-88968: Claude Code Edit tool symlink race overwrites files outside workspace on macOSSame vendor · NVD/CVE Database
- HighCVE-2026-88066: Claude Desktop on Windows git.exe execution via search pathSame vendor · NVD/CVE Database
- HighCVE-2026-62331: praktor path traversal via Telegram document upload filenamesSame vendor · NVD/CVE Database
- MediumGHSA-w4fh-qvv9-3v23: Model Context Protocol Python SDK: Server bearer-token authentication accepts tokens issued for a different resource serverSame vendor · GitHub Advisory Database
- MediumGHSA-5h93-6whr-6q8j: Model Context Protocol Python SDK: HTTP client transports followed cross-origin redirects carrying custom headers and bodiesSame vendor · GitHub Advisory Database