CVE-2026-25724 — UNIX Symbolic Link (Symlink) Following in Claude-code

CWE-61 — UNIX Symbolic Link (Symlink) FollowingCWE-285 — Improper Authorization13 documents5 sources
Severity
2.3LOWNVD
EPSS
0.1%
top 79.53%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
3
Anthropics Claude-codeAnthropic Claude CodeAnthropic-ai Claude-code
Timeline
PublishedFeb 6
Latest updateApr 11

Description

Claude Code is an agentic coding tool. Prior to version 2.1.7, Claude Code failed to strictly enforce deny rules configured in settings.json when accessing files through symbolic links. If a user explicitly denied Claude Code access to a file (such as /etc/passwd) and Claude Code had access to a symbolic link pointing to that file, it was possible for Claude Code to read the restricted file through the symlink without triggering deny rule enforcement. This issue has been patched in version 2.1.7…

CVSS vector

CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:P/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N

Affected Packages3 packages

▶CVEListV5anthropics/claude-code< 2.1.7

🔴Vulnerability Details

3
VulDB
Anthropic claude-code up to 2.1.6 Setting settings.json symlink (GHSA-4q92-rfm6-2cqx / Nessus ID 305984)↗2026-04-11
▶
GHSA
Claude Code has Permission Deny Bypass Through Symbolic Links↗2026-02-06
▶
OSV
Claude Code has Permission Deny Bypass Through Symbolic Links↗2026-02-06
▶

🕵️Threat Intelligence

9
Wiz
CVE-2026-25723 Impact, Exploitability, and Mitigation Steps | Wiz↗
▶
Wiz
CVE-2026-24053 Impact, Exploitability, and Mitigation Steps | Wiz↗
▶
Wiz
CVE-2026-33068 Impact, Exploitability, and Mitigation Steps | Wiz↗
▶
Wiz
CVE-2026-25722 Impact, Exploitability, and Mitigation Steps | Wiz↗
▶
Wiz
CVE-2026-24052 Impact, Exploitability, and Mitigation Steps | Wiz↗
▶