PT-2026-6763 · Anthropic · Claude-Code

Nil221 · Published 2026-02-06 · Updated 2026-02-09 · CVE-2026-25722

Positive Technologies (AI Summary)

CVSS v3.1

9.1

Critical

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H

Name of the Vulnerable Software and Affected Versions Claude Code versions prior to 2.0.57

Description Claude Code, an agentic coding tool, did not properly validate directory changes when combined with write operations to protected folders. Utilizing the cd command to navigate into sensitive directories, such as .claude, allowed bypassing write protection, enabling the creation or modification of files without user confirmation. Successful exploitation required the ability to inject untrusted content into a Claude Code context window.

Recommendations Update to version 2.0.57 or later.

Exploit

Fix

OS Command Injection

RCE

Weakness Enumeration

CWE-78

CWE-20

Related Identifiers

CVE-2026-25722

GHSA-66Q4-VFJG-2QHH

Affected Products

Claude-Code

References · 9

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/25xxx/CVE-2026-25722.json · Exploit
• https://github.com/anthropics/claude-code/security/advisories/GHSA-66q4-vfjg-2qhh · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2026-25722 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2026-25722 · Security Note
• https://osv.dev/vulnerability/GHSA-66q4-vfjg-2qhh · Vendor Advisory
• https://github.com/anthropics/claude-code · Note
• https://twitter.com/TheHackerWire/status/2020892173210976395 · Twitter Post
• https://twitter.com/CVEnew/status/2019847332221583470 · Twitter Post
• https://t.me/cveNotify/151407 · Telegram Post