CVE-2025-54794

Description

Claude Code is an agentic coding tool. In versions below 0.2.111, a path validation flaw using prefix matching instead of canonical path comparison, makes it possible to bypass directory restrictions and access files outside the CWD. Successful exploitation depends on the presence of (or ability to create) a directory with the same prefix as the CWD and the ability to add untrusted content into a Claude Code context window. This is fixed in version 0.2.111.

Reserved 2025-07-29 | Published 2025-08-05 | Updated 2025-08-05 | Assigner GitHub_M

Problem types

CWE-22: Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')

Product status

< 0.2.111
affected

References

github.com/...e-code/security/advisories/GHSA-pmw4-pwvc-3hx2

cve.org (CVE-2025-54794)

nvd.nist.gov (CVE-2025-54794)

Download JSON