RCE in Anthropics Claude-code

CVE-2026-25723

Claude Code is an agentic coding tool. Prior to version 2.0.55, Claude Code failed to properly validate commands using piped sed operations with the echo command, allowing attackers to bypass file write restrictions. This vulnerability ena…

Vulnerability class: Drupalgeddon 2 (CVE-2018-7600)

EPSS: 0.001 (27.3th percentile) — read the EPSS interpretation.

Affected products

Anthropics Claude-code — versions < 2.0.55

Weakness classification (CWE)

References

https://github.com/anthropics/claude-code/security/advisories/GHSA-mhg7-666j-cqg4 (x_refsource_CONFIRM)