CVE-2025-59829lowCWE-61

CVE-2025-59829: low-severity vulnerability in anthropics claude-code

Claude Code: Permission deny bypass is possible through symlink

Published

Follow this CVE+ Monitor claude-code+ Monitor @anthropic-ai/claude-code

E-mail alert when it lands in KEV, gets a public PoC or its score goes up.

8Vexday Risk Score

No sign of exploitation. No public exploitation artifact known so far.

ssvc Trackcvss 2.3epss 0.4%
In short

Claude Code could bypass file access restrictions by using symbolic links (shortcuts) to reach files that were supposed to be blocked. This means if you denied the tool access to a file, it could still read it through a shortcut pointing to that file.

Technical detail

CWE-61 (Improper Validation of Symlink Resolution) in Claude Code versions <1.0.120: the permission deny mechanism failed to resolve and validate symlink targets, allowing an attacker with symlink creation capability to access restricted files indirectly. Mitigation requires following symlinks during permission checks or denying symlink traversal entirely.

Summary generated and translated by AI from the official description.
Claude Code is an agentic coding tool. Versions below 1.0.120 failed to account for symlinks when checking permission deny rules. If a user explicitly denied Claude Code access to a file and Claude Code had access to a symlink pointing to that file, it was possible for Claude Code to access the file. Users on standard Claude Code auto-update will have received this fix automatically. Users performing manual updates are advised to update to the latest version. This issue is fixed in version 1.0.120.
CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:P/VC:L/VI:L/VA:N/SC:N/SI:N/SA:N
Affected products
anthropics · claude-code
Related CVEs — anthropics claude-code

In the same product, most dangerous first.

CVE-2026-21852MEDIUMClaude Code Leaks Data via Malicious Environment Configuration Before Trust ConfirmationEPSS 27.5%CVE-2025-59536HIGHClaude Code's startup trust dialog could lead to Command Execution attackEPSS 24.9%CVE-2025-54794HIGHClaude Code Research Preview has a Path Restriction Bypass which could allow unauthorized file accessEPSS 1.5%CVE-2025-54795HIGHClaude Code echo command allowed bypass of user approval prompt for command executionEPSS 1.1%CVE-2025-66032HIGHClaude Code Command Validation Bypass Allows Arbitrary Code ExecutionEPSS 0.7%CVE-2026-39861HIGHClaude Code: Sandbox Escape via Symlink Following Allows Arbitrary File Write Outside WorkspaceEPSS 0.7%