CVE-2025-64755
High · 8.8@anthropic-ai/claude-code has Sed Command Validation Bypass that Allows Arbitrary File Writes
CVSS
8.8
EPSS
0.6%
Published
Nov 20, 2025
CISA due date
—
The record
Due to an error in sed command parsing, it was possible to bypass the Claude Code read-only validation and write to arbitrary files on the host system. Users on standard Claude Code auto-update will have received this fix automatically. Users performing manual updates are advised to update to the latest version. Thank you to Adam Chester - SpecterOps for reporting this issue!
Affected packages
| Ecosystem | Package | Introduced | Fixed |
|---|---|---|---|
| npm | @anthropic-ai/claude-code | 0 | 2.0.31 |
Related vulnerabilities
- GHSA-7mv8-j34q-vp7q @anthropic-ai/claude-code has Sed Command Validation Bypass that Allows Arbitrary File… Same vulnerability
- CVE-2026-54316 Claude Code is an agentic coding tool. Also affects @anthropic-ai/claude-code
- GHSA-fg94-h982-f3mm Claude Code: Out-of-Band Data Exfiltration via Pre-Approved HuggingFace Domain in WebFetch Also affects @anthropic-ai/claude-code
- CVE-2026-40068 In versions 2.1.63 through 2.1.83 of Claude Code, the folder trust determination logic… Also affects @anthropic-ai/claude-code
- GHSA-q5hj-mxqh-vv77 Claude Code: Trust Dialog Bypass via Git Worktree Spoofing Allows Arbitrary Code Execution Also affects @anthropic-ai/claude-code
- GHSA-vp62-r36r-9xqp Claude Code: Sandbox Escape via Symlink Following Allows Arbitrary File Write Outside… Also affects @anthropic-ai/claude-code
- CVE-2026-39861 Claude Code is an agentic coding tool. Also affects @anthropic-ai/claude-code
- GHSA-5cwg-9f6j-9jvx Claude Code: Insecure System-Wide Configuration Loading Enables Local Privilege… Also affects @anthropic-ai/claude-code