RCE in Anthropics Claude-code

CVE-2025-64755

Claude Code is an agentic coding tool. Prior to version 2.0.31, due to an error in sed command parsing, it was possible to bypass the Claude Code read-only validation and write to arbitrary files on the host system. This issue has been pat…

Vulnerability class: Command Injection (OS Command Injection)

EPSS: 0.001 (29.6th percentile) — read the EPSS interpretation.

Affected products

Weakness classification (CWE)

References