Claude Code is an agentic coding tool. Prior to version 2.0.31, due to an error in sed command parsing, it was possible to bypass the Claude Code read-only validation and write to arbitrary files on the host system. This issue has been patched in version 2.0.31.
Metrics
Affected Vendors & Products
No data.
No data.
No data.
No data.
Advisories
| Source | ID | Title |
|---|---|---|
 Github GHSA |
GHSA-7mv8-j34q-vp7q | @anthropic-ai/claude-code has Sed Command Validation Bypass that Allows Arbitrary File Writes |
Fixes
Solution
No solution given by the vendor.
Workaround
No workaround given by the vendor.
References
History
Fri, 21 Nov 2025 01:45:00 +0000
| Type | Values Removed | Values Added |
|---|---|---|
| Description | Claude Code is an agentic coding tool. Prior to version 2.0.31, due to an error in sed command parsing, it was possible to bypass the Claude Code read-only validation and write to arbitrary files on the host system. This issue has been patched in version 2.0.31. | |
| Title | @anthropic-ai/claude-code has Sed Command Validation Bypass that Allows Arbitrary File Writes | |
| Weaknesses | CWE-78 | |
| References |
| |
| Metrics |
cvssV4_0
|
MITRE
Status: PUBLISHED
Assigner: GitHub_M
Published:
Updated: 2025-11-21T01:13:05.579Z
Reserved: 2025-11-10T22:29:34.874Z
Link: CVE-2025-64755
Vulnrichment
No data.
NVD
Status : Received
Published: 2025-11-21T02:15:43.917
Modified: 2025-11-21T02:15:43.917
Link: CVE-2025-64755
Redhat
No data.
OpenCVE Enrichment
No data.