Signal is active with 1 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
Claude Code is an agentic coding tool. Prior to version 2.0.57, Claude Code failed to properly validate directory changes when combined with write operations to protected folders. By using the cd command to navigate into sensitive directories like .claude, it was possible to bypass write protection and create or modify files without user confirmation. Reliably exploiting this required the ability to add untrusted content into a Claude Code context window. This issue has been patched in version 2.0.57.
Priority
LOW
Exploitation
NONE
PoC
NONE
Patch
NONE
Momentum
STABLE
If you run products in this scope, you should treat this CVE as relevant to your environment.
CVE-2026-25722 Claude Code is an agentic coding tool. Prior to version 2.0.57, Claude Code failed to properly validate directory changes when combined with write operations to prote… https://www.cve.org/CVERecord?id=CVE-2026-25722
Post summary
CVE-2026-25722 describes a directory validation flaw in Claude Code (v<2.0.57) that could be abused with certain write operations, but no PoC, exploit, or patch information is provided.
🔴 CVE-2026-25722 - Critical Claude Code is an agentic coding tool. Prior to version 2.0.57, Claude Code failed to properly validate directory changes when combined with write operations to protected folders. By usin... https://www.thehackerwire.com/vulnerability/CVE-2026-25722/ https://t.co/yGeTiBHej5
Post summary
CVE-2026-25722 highlights a critical directory validation flaw in Claude Code prior to version 2.0.57, allowing writes to protected folders; no PoC, exploit, or active exploitation details are provided.
1 of 1 entries
| Part | Vendor | Product | Version | Target SW | Target HW |
|---|---|---|---|---|---|
| App | anthropic | claude_code | - | node.js | - |