CVE-2026-25766

creationtimestamp| type| source ---|---|--- 2026-02-17 15:04:59+00:00| published-proof-of-concept| https://github.com/labstack/echo/security/advisories/GHSA-pgvm-wxw2-hrv9...

Command Validation Bypass

@anthropic-ai/claude-code is vulnerable to command validation bypass. The vulnerability is due to improper validation of piped sed operations with the echo command, which allows an attacker to bypass file write restrictions and write to sensitive directories when the “accept edits” feature is...

ECHO-58DA-C48D-AC57

Bulletin has no description...

ECHO-40C1-1118-0D1F

Bulletin has no description...

ECHO-8045-D421-86EE

Bulletin has no description...

ECHO-FB35-8573-FE52

Bulletin has no description...

ECHO-B8B8-AEAF-8522

Bulletin has no description...

ECHO-684E-7BD7-EC1E

Bulletin has no description...

ECHO-3E6F-5903-BE5C

Bulletin has no description...

ECHO-14FD-C2A6-6909

Bulletin has no description...

ECHO-00DB-7229-380A

Bulletin has no description...

ECHO-9BE6-42A6-D517

Bulletin has no description...

ECHO-0310-83FC-3009

Bulletin has no description...

ECHO-CC53-18E7-B677

Bulletin has no description...

ECHO-8037-DF07-6304

Bulletin has no description...

ECHO-4EF6-A995-EFC1

Bulletin has no description...

ECHO-DFC2-DE71-F868

Bulletin has no description...

ECHO-9143-8DE4-ECC3

Bulletin has no description...

ECHO-CC6D-1A6B-5B40

Bulletin has no description...

ECHO-715C-8CF0-B1E2

Bulletin has no description...