CriticalVulnerabilityLLM-specific
CVE-2025-54794: Claude Code path validation flaw exposes files outside working directory
- Source
- NVD(opens in a new tab)
- Identifier
- CVE-2025-54794
- Published
- Record updated
- Affected
- @anthropic-ai/claude-code < 0.2.111
- Fixed in
- 0.2.111
- Known exploitation
- Not listed in the CISA Known Exploited Vulnerabilities catalog at the last check.
- EPSS
- 1.4%
Summary
CVE-2025-54794 affects Claude Code versions below 0.2.111. A path validation flaw compares path prefixes instead of canonical paths, which lets an attacker bypass directory restrictions and access files outside the CWD. Exploitation requires a directory sharing the CWD's prefix that exists or can be created, plus the ability to add untrusted content into a Claude Code context window. GitHub, Inc. rates it CVSS 4.0 7.7 (High).
Mitigation
Fixed in version 0.2.111.
Topics
Related items
- HighCVE-2026-88968: Claude Code Edit tool symlink race overwrites files outside workspace on macOSSame vendor · NVD/CVE Database
- HighCVE-2026-88066: Claude Desktop on Windows git.exe execution via search pathSame vendor · NVD/CVE Database
- HighCVE-2026-62331: praktor path traversal via Telegram document upload filenamesSame vendor · NVD/CVE Database
- MediumGHSA-w4fh-qvv9-3v23: Model Context Protocol Python SDK: Server bearer-token authentication accepts tokens issued for a different resource serverSame vendor · GitHub Advisory Database
- MediumGHSA-5h93-6whr-6q8j: Model Context Protocol Python SDK: HTTP client transports followed cross-origin redirects carrying custom headers and bodiesSame vendor · GitHub Advisory Database