VulnSocial

CVE-2025-54794General(anthropic / claude_code)

LOWCVSS 9.1 · CRITICAL

Signal is active with 1 mentions in latest observed window

Immediate actions

  • Track advisory updates for patch or workaround availability

Recommended action window: Monitor and triage in normal cycle

NVD description

Claude Code is an agentic coding tool. In versions below 0.2.111, a path validation flaw using prefix matching instead of canonical path comparison, makes it possible to bypass directory restrictions and access files outside the CWD. Successful exploitation depends on the presence of (or ability to create) a directory with the same prefix as the CWD and the ability to add untrusted content into a Claude Code context window. This is fixed in version 0.2.111.

anthropic CVEsBack to dashboard
0.0/ 10 priority

Sources & remediation

Vendor / third-party advisories
Weakness type (CWE)
CWE-22

Priority

LOW

Exploitation

NONE

PoC

NONE

Patch

NONE

Momentum

STABLE

Are you affected?

If you run products in this scope, you should treat this CVE as relevant to your environment.

  • claude_code

Threat summary

  • 2 mentions across 2 observed days
  • Momentum state: stable

What's happening

  • Technical details provided in 1 signal
  • General: 1 classified signal
  • Disclosure: 1 classified signal
  • Peaked 1d ago at 1 mentions (2026-02-17); latest day: 1
  • 2 total mentions across 2 days

Affected systems

Vendors
anthropic
Products
claude_code

Deep dive

Activity timeline2 mentions / 2d
00111Mentions · 2026-02-17: 1Mentions · 2026-03-31: 1Technical Details · 2026-03-31: 102-1703-31
Signal classification2 categories
General
150.0%
Disclosure
150.0%
Referenced assets1 URL
By indicator
Classification over time
DateTotalLabels
2026-02-171
General1
2026-03-311
Disclosure1
Full discourse2 posts
  • Akash Muni@akashmuni27
    Disclosure

    The CVE list is wild. - WebSocket auth bypass, any website could read your files via the IDE extension (CVE-2025-52882, CVSS 8.8) - Directory escape via naive prefix matching (CVE-2025-54794, CVSS 8.4) - Shell injection between whitelisted echo commands (CVE-2025-54795) - DNS exfiltration via command allowlist (CVE-2025-55284) 21 total. Growing.

    Post summary

    The post announces a set of new vulnerabilities, offering brief technical descriptions and CVSS scores, but provides no proof of concept, exploit code, or mitigation advice.

    10000230
    1.2K followersView on X
  • Leg Before Teebo@dmesg
    General

    @OneManSaas @forloopcodes https://nvd.nist.gov/vuln/detail/CVE-2025-54794 Still not fixed and for that matter not fixable. The use case of "Claude summarize this document from the Internet for me" is just not a feasible one.

    Post summary

    The tweet notes that CVE-2025-54794 remains unfixed and likely unfixable, but offers no details on exploitation, remediation, or technical specifics.

    00000178
    598 followersView on X
CPE platform detail1 entries

1 of 1 entries

PartVendorProductVersionTarget SWTarget HW
Appanthropicclaude_code-node.js-

Explore more

Back to dashboardanthropic CVEsclaude_code vulnerabilities