HIGH

GHSA-7mv8-j34q-vp7q

@anthropic-ai/claude-code has Sed Command Validation Bypass that Allows Arbitrary File Writes

Quick fix

GHSA-7mv8-j34q-vp7q — @anthropic-ai/claude-code: upgrade to the fixed version with the command below.

npm install @anthropic-ai/claude-code@2.0.31

Details

Due to an error in sed command parsing, it was possible to bypass the Claude Code read-only validation and write to arbitrary files on the host system.

Users on standard Claude Code auto-update will have received this fix automatically. Users performing manual updates are advised to update to the latest version.

Thank you to Adam Chester - SpecterOps for reporting this issue!

Are you affected?

Enter the version of the package you're using.

Affected packages

npm/@anthropic-ai/claude-code

Introduced in: 0Fixed in: 2.0.31

Fixnpm install @anthropic-ai/claude-code@2.0.31

References

https://github.com/anthropics/claude-code/security/advisories/GHSA-7mv8-j34q-vp7q[WEB]
https://nvd.nist.gov/vuln/detail/CVE-2025-64755[ADVISORY]
https://github.com/anthropics/claude-code[PACKAGE]