LOW

GHSA-66m2-gx93-v996

Claude Code permission deny bypass through symlink

Quick fix

GHSA-66m2-gx93-v996 — @anthropic-ai/claude-code: upgrade to the fixed version with the command below.

npm install @anthropic-ai/claude-code@1.0.120

Details

Claude Code failed to account for symlinks when checking permission deny rules. If a user explicitly denied Claude Code access to a file and Claude Code had access to a symlink pointing to that file, it was possible for Claude Code to access the file.

Users on standard Claude Code auto-update will have received this fix automatically. Users performing manual updates are advised to update to the latest version.

Thank you to https://hackerone.com/vinai for reporting this issue!

Are you affected?

Enter the version of the package you're using.

Affected packages

npm/@anthropic-ai/claude-code

Introduced in: 0Fixed in: 1.0.120

Fixnpm install @anthropic-ai/claude-code@1.0.120

References

https://github.com/anthropics/claude-code/security/advisories/GHSA-66m2-gx93-v996[WEB]
https://nvd.nist.gov/vuln/detail/CVE-2025-59829[ADVISORY]
https://github.com/anthropics/claude-code[PACKAGE]