CVE-2026-25722
CRITICALClaude Code < 2.0.57 - Unauthenticated Path Traversal and Arbitrary File Write via Directory Change Command
Title source: llmDescription
Claude Code is an agentic coding tool. Prior to version 2.0.57, Claude Code failed to properly validate directory changes when combined with write operations to protected folders. By using the cd command to navigate into sensitive directories like .claude, it was possible to bypass write protection and create or modify files without user confirmation. Reliably exploiting this required the ability to add untrusted content into a Claude Code context window. This issue has been patched in version 2.0.57.
References (1)
Core 1
Core References
Vendor Advisory x_refsource_confirm
https://github.com/anthropics/claude-code/security/advisories/GHSA-66q4-vfjg-2qhh
Scores
CVSS v3
9.1
EPSS
0.0036
EPSS Percentile
27.4%
Attack Vector
NETWORK
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H
CISA SSVC
Vulnrichment
Exploitation
none
Automatable
no
Technical Impact
total
Details
CWE
CWE-20
CWE-78
Status
published
Products (2)
anthropic/claude_code
< 2.0.57
anthropic-ai/claude-code
0 - 2.0.57npm
Published
Feb 06, 2026
Tracked Since
Feb 18, 2026