Vulnerability Report

CVE-2026-25724

Title: File access bypass in Claude Code via symbolic links

Other

Proof Of Concept

No public PoC currently indexed for CVE-2026-25724.

CWE Category CWE-61

Published Date Feb 06, 2026

Modified Date Mar 27, 2026

Exploit Status Not Found

Score 2.3 CVSS v4.0

Exploit Probability (EPSS)

0.38%

Vulnerability Summary

CVE-2026-25724: Claude Code is an agentic coding tool. Prior to version 2.1.7, Claude Code failed to strictly enforce deny rules configured in settings.json when accessing files through symbolic links. If a user explicitly denied Claude Code access to a file (such as /etc/passwd) and Claude Code had access to a symbolic link pointing to that file, it was possible for Claude Code to read the restricted file through the symlink without triggering deny rule enforcement. This issue has been patched in version 2.1.7.

Impacted Vendors

anthropic 1

Reference Links

https://github.com/anthropics/claude-code/security/advisories/GHSA-4q92-rfm6-2cqx

CVSS v4.0

Source Entity [email protected]

Severity LOW

2.3

Attack Vector

NETWORK

Complexity

LOW

Privileges

N/A

Interaction

PASSIVE

Confidentiality

N/A

Integrity

N/A

Availability

N/A

Scope

N/A

RAW VECTOR

CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:P/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

CVSS v3.1

Source Entity [email protected]

Severity HIGH

7.5

Attack Vector

NETWORK

Complexity

LOW

Privileges

N/A

Interaction

NONE

Confidentiality

N/A

Integrity

N/A

Availability

N/A

Scope

UNCHANGED

RAW VECTOR CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Associated Attack Patterns (CAPEC)

Total: Patterns