Lucene search
+L

21 matches found

Github Security Blog
Github Security Blog
added 2026/02/06 7:4 p.m.14 views

Claude Code Vulnerable to Command Injection via Piped sed Command Bypasses File Write Restrictions

Claude Code failed to properly validate commands using piped sed operations with the echo command, allowing attackers to bypass file write restrictions. This vulnerability enabled writing to sensitive directories like the .claude folder and paths outside the project scope. Exploiting this require...

7.7CVSS5.6AI score0.00264EPSS
SaveExploits0References3Affected Software1
Rows per page
Query Builder