2.3Low
CVE-2025-59829Claude Code: Permission deny bypass is possible through symlink
Description
Claude Code is an agentic coding tool. Versions below 1.0.120 failed to account for symlinks when checking permission deny rules. If a user explicitly denied Claude Code access to a file and Claude Code had access to a symlink pointing to that file, it was possible for Claude Code to access the file. Users on standard Claude Code auto-update will have received this fix automatically. Users performing manual updates are advised to update to the latest version. This issue is fixed in version 1.0.120.
Weakness (CWE):
CWE-61
Data: CVE.org, NVD, CISA KEV, FIRST EPSS, Ubuntu. Published as the sources state it, in English.
Affected products and versions
| Vendor | Product | Versions | |
|---|---|---|---|
| anthropic | claude code | < 1.0.120 | |
| anthropics | claude-code | < 1.0.120 |
References and patches
CPE matches (NVD) (1)
cpe:2.3:a:anthropic:claude_code:*:*:*:*:*:node.js:*:*< 1.0.120