CVE-2026-88968

Claude Code is an agentic coding tool. Prior to 2.1.251, the Edit tool validates a target using pathname and symlink resolution that is not bound to the underlying directory inode or file descriptor. On macOS, attacker-controlled code running in the Bash sandbox can atomically replace an...

EUVD-2026-116209

Claude Code is an agentic coding tool. Prior to 2.1.251, the Edit tool validates a target using pathname and symlink resolution that is not bound to the underlying directory inode or file descriptor. On macOS, attacker-controlled code running in the Bash sandbox can atomically replace an...

CVE-2026-88968 Claude Code: TOCTOU Race in Edit Tool Allows File Writes Outside the Workspace

Claude Code is an agentic coding tool. Prior to 2.1.251, the Edit tool validates a target using pathname and symlink resolution that is not bound to the underlying directory inode or file descriptor. On macOS, attacker-controlled code running in the Bash sandbox can atomically replace an...

CVE-2026-88968

The Claude Code agentic coding tool (versions prior to 2.1.251 ) is vulnerable to a Time-of-check Time-of-use (TOCTOU) race condition in its Edit tool . The tool validates targets using pathname and symlink resolution that are not bound to the underlying directory inode or file descriptor. On mac...

CVE-2026-88968: anthropics claude-code: Claude Code is an agentic coding tool

Claude Code is an agentic coding tool. Prior to 2.1.251, the Edit tool validates a target using pathname and symlink resolution that is not bound to the underlying directory inode or file descriptor. On macOS, attacker-controlled code running in the Bash sandbox can atomically replace an...