PT-2026-6764 · Anthropic · Claude-Code

Nil221 · Published 2026-02-06 · Updated 2026-04-30 · CVE-2026-25723

Positive Technologies (AI Summary)

CVSS v4.0

7.7

High

Base vector

AV:N/AC:L/AT:P/PR:N/UI:P/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N

Name of the Vulnerable Software and Affected Versions Claude Code versions prior to 2.0.55

Description Claude Code, an agentic coding tool, exhibited a flaw in command validation. Specifically, the software did not adequately validate commands utilizing piped sed operations with the echo command. This allowed attackers to circumvent file write restrictions, potentially enabling them to write to sensitive directories such as the .claude folder and locations outside the intended project scope. Successful exploitation required the ability to execute commands through Claude Code with the "accept edits" feature enabled.

Recommendations Update to version 2.0.55 or later.

Exploit

Fix

OS Command Injection

RCE

Weakness Enumeration

CWE-78

CWE-20

Related Identifiers

CVE-2026-25723

GHSA-MHG7-666J-CQG4

Affected Products

Claude-Code

References · 11

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/25xxx/CVE-2026-25723.json · Exploit
• https://github.com/anthropics/claude-code/security/advisories/GHSA-mhg7-666j-cqg4 · Vendor Advisory
• https://osv.dev/vulnerability/GHSA-mhg7-666j-cqg4 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2026-25723 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2026-25723 · Security Note
• https://github.com/anthropics/claude-code · Note
• https://t.me/cveNotify/151408 · Telegram Post
• https://twitter.com/CVEnew/status/2019847331311481130 · Twitter Post
• https://reddit.com/r/u_softtechhubus/comments/1t0aaru/claude_code_copilot_codex_hacked_the_real_target · Reddit Post
• https://twitter.com/_cvereports/status/2020356940719652930 · Twitter Post
• https://twitter.com/threatcluster/status/2049994850947215444 · Twitter Post