CVE Feed

    Dashboard / CVE / CVE-2026-25725

    CVE-2026-25725

    Claude Code is an agentic coding tool. Prior to version 2.1.2, Claude Code's bubblewrap sandboxing mechanism failed to properly protect the .claude/settings.json configuration file when it did not exist at startup. While the parent directory was mounted as writable and .claude/settings.local.json was explicitly protected with read-only constraints, settings.json was not protected if it was missing. This allowed malicious code running inside the sandbox to create this file and inject persistent hooks (such as SessionStart commands) that would execute with host privileges when Claude Code was restarted. This issue has been patched in version 2.1.2.

    Published:Feb 6, 2026
    Last Modified:Apr 17, 2026
    EPS:Feb 6, 2026
    EPSS Score:0.00023
    CVSS Score:10

    Affected Products

    Vendor
    Anthropic
    Product
    Claude Code
    Vendor
    Anthropics
    Product
    Claude Code

    Exploits

    No exploit reference

    Common Attack Pattern Enumeration and Classification (CAPEC)

    No CAPEC recorded yet

    Related CVEs

    CVE-2026-40068 (CVSS 7.7) — In versions 2.1.63 through 2.1.83 of Claude Code, the folder trust determination logic used the git worktree c…
    CVE-2026-39861 (CVSS 7.7) — Claude Code is an agentic coding tool. Prior to version 2.1.64, Claude Code's sandbox did not prevent sandboxe…
    CVE-2026-35603 (CVSS 5.4) — Claude Code is an agentic coding tool. In versions prior to 2.1.75 on Windows, Claude Code loaded the system-w…
    CVE-2026-35022 — This CVE ID has been rejected by its CVE Numbering Authority (CNA). It was determined that the -p flag behavio…
    CVE-2026-35021 — This CVE ID has been rejected by its CVE Numbering Authority (CNA). It was determined that the affected code p…
    CVE-2026-35020 — This CVE ID has been rejected by the its CVE Numbering Authority (CNA). It was determined that the attack requ…
    CVE-2026-33068 (CVSS 7.7) — Claude Code is an agentic coding tool. Versions prior to 2.1.53 resolved the permission mode from settings fil…
    CVE-2026-25724 (CVSS 2.3) — Claude Code is an agentic coding tool. Prior to version 2.1.7, Claude Code failed to strictly enforce deny rul…
    CVE-2026-25723 (CVSS 7.7) — Claude Code is an agentic coding tool. Prior to version 2.0.55, Claude Code failed to properly validate comman…
    CVE-2026-25722 (CVSS 7.7) — Claude Code is an agentic coding tool. Prior to version 2.0.57, Claude Code failed to properly validate direct…

    Common Vulnerability Scoring System

    Attack Vector
    Network
    Adjacent
    Local
    Physical
    Privileges Required
    None
    Low
    High
    User Interaction
    None
    Required
    Scope
    Unchanged
    Changed
    Confidentiality
    None
    Low
    High
    Integrity
    None
    Low
    High
    Availability
    None
    Low
    High