{"cve":"CVE-2025-54794","nvd":{"published":"2025-08-05T01:15:41.877","modified":"2026-06-17T09:40:43.057","status":"Analyzed","description":"Claude Code is an agentic coding tool. In versions below 0.2.111, a path validation flaw using prefix matching instead of canonical path comparison, makes it possible to bypass directory restrictions and access files outside the CWD. Successful exploitation depends on the presence of (or ability to create) a directory with the same prefix as the CWD and the ability to add untrusted content into a Claude Code context window. This is fixed in version 0.2.111.","cvss_v4":{"vector":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:P/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N","score":7.7},"cvss_v3":{"version":"3.1","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N","score":9.1},"cwes":["CWE-22"],"references":["https://github.com/anthropics/claude-code/security/advisories/GHSA-pmw4-pwvc-3hx2"],"products":["anthropic:claude_code"],"source":"nvd","synced_at":"2026-10-19T22:06:45.861874017+00:00"},"epss":{"cve":"CVE-2025-54794","score":0.01387,"percentile":0.7226,"date":"2026-11-01"},"kev":null,"osv":[{"id":"GHSA-pmw4-pwvc-3hx2","url":"https://osv.dev/vulnerability/GHSA-pmw4-pwvc-3hx2","summary":"Claude Code Research Preview has a Path Restriction Bypass which could allow unauthorized file access","modified":"2025-08-05T17:10:27Z","packages":[{"ecosystem":"npm","name":"@anthropic-ai/claude-code","purl":"pkg:npm/%40anthropic-ai/claude-code","ranges":["<0.2.111"],"fixed":["0.2.111"]}]}],"attribution":["This product uses the NVD API but is not endorsed or certified by the NVD.","EPSS scores: FIRST Exploit Prediction Scoring System, https://www.first.org/epss","Known exploited vulnerabilities: CISA Known Exploited Vulnerabilities Catalog, https://www.cisa.gov/known-exploited-vulnerabilities-catalog","Package advisories: OSV (https://osv.dev), from the GitHub Advisory Database, PyPA, Go, RustSec and other ecosystem databases, under CC-BY 4.0 or CC0","CVE records: the CVE Program's CVE List (https://www.cve.org), under its terms of use (https://www.cve.org/Legal/TermsOfUse). CVE is a registered trademark of The MITRE Corporation; this product is not affiliated with the CVE Program."]}