Skip to content
OpenAdvisories

Product · anthropics

claude-code

32 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • Low 2.3
    CVE-2026-25724

    Claude Code Has Permission Deny Bypass Through Symbolic Links

    Claude Code is an agentic coding tool. Prior to version 2.1.7, Claude Code failed to strictly enforce deny rules configured in settings.json when accessing files through symbolic links. If a user explicitly denied Claude Code access to a file (such as /etc/pa…

    anthropics claude-code @anthropic-ai/claude-code npm
  • Low 2.3
    CVE-2025-59829

    Claude Code: Permission deny bypass is possible through symlink

    Claude Code is an agentic coding tool. Versions below 1.0.120 failed to account for symlinks when checking permission deny rules. If a user explicitly denied Claude Code access to a file and Claude Code had access to a symlink pointing to that file, it was po…

    anthropics claude-code @anthropic-ai/claude-code npm