by Kastro
Paper/Archive/CVE-2025-64755

CVE-2025-64755

anthropics claude-code — @anthropic-ai/claude-code has Sed Command Validation Bypass that Allows Arbitrary File Writes

EPSS 0.6%CVSS 9.8
critical.is priorityof 100
39
CVSS 9.8 (NVD)9.8 / 10 × 3029.4Not in CISA KEV+300.0EPSS percentile 49.6.496 × 209.9No public exploit+100.0SSVC exploitation: none+100.0
Description · from the CVE record

Claude Code is an agentic coding tool. Prior to version 2.0.31, due to an error in sed command parsing, it was possible to bypass the Claude Code read-only validation and write to arbitrary files on the host system. This issue has been patched in version 2.0.31.

Affected

ProductAffectedFixed inSource
claude-code< 2.0.31–CNA

Scores by source

NVD9.8CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
GitHub_M (CNA)8.7CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
CISA ADPSSVCExploitation: none · Automatable: yes · Technical impact: total

References

refgithub.com/anthropics/claude-code/security/advisories/GHSA-7mv8-j34q-vp7q