Lucene search
K

6 matches found

OSV
OSV
added 2025/10/03 8:3 p.m.3 views

CVE-2025-59829 Claude Code: Permission deny bypass is possible through symlink

Claude Code is an agentic coding tool. Versions below 1.0.120 failed to account for symlinks when checking permission deny rules. If a user explicitly denied Claude Code access to a file and Claude Code had access to a symlink pointing to that file, it was possible for Claude Code to access the...

2.3CVSS6.8AI score0.00064EPSS
Exploits0References3
CVE
CVE
added 2025/10/03 8:3 p.m.10 views

CVE-2025-59829

CVE-2025-59829 affects Claude Code (Anthropic) prior to version 1.0.120. The root cause is improper handling of symbolic links when evaluating permission-deny rules, enabling a user-denied file to be accessed via a symlink pointing to that file. The issue is fixed in 1.0.120. Impact is exposure o...

6.5CVSS6.4AI score0.00064EPSS
Exploits0References1Affected Software1
Cvelist
Cvelist
added 2025/10/03 8:3 p.m.5 views

CVE-2025-59829 Claude Code: Permission deny bypass is possible through symlink

Claude Code is an agentic coding tool. Versions below 1.0.120 failed to account for symlinks when checking permission deny rules. If a user explicitly denied Claude Code access to a file and Claude Code had access to a symlink pointing to that file, it was possible for Claude Code to access the...

2.3CVSS0.00064EPSS
Exploits0References1
Vulnrichment
Vulnrichment
added 2025/10/03 8:3 p.m.4 views

CVE-2025-59829 Claude Code: Permission deny bypass is possible through symlink

Claude Code is an agentic coding tool. Versions below 1.0.120 failed to account for symlinks when checking permission deny rules. If a user explicitly denied Claude Code access to a file and Claude Code had access to a symlink pointing to that file, it was possible for Claude Code to access the...

2.3CVSS6.4AI score0.00064EPSS
Exploits0References1
CNNVD
CNNVD
added 2025/10/03 12:0 a.m.3 views

Claude Code 安全漏洞

Claude Code is an open source proxy coding tool from Anthropic. A security vulnerability exists in Claude Code versions prior to 1.0.120 that stems from a failure to consider symbolic links when checking permission denial rules, which could lead to bypassing file access restrictions...

6.5CVSS6.4AI score0.00064EPSS
Exploits0References1
Positive Technologies
Positive Technologies
added 2023/08/05 12:0 a.m.5 views

PT-2023-23904 · WordPress · Rank Math Seo

Name of the Vulnerable Software and Affected Versions: Rank Math SEO plugin versions prior to 1.0.120 Description: A Stored Cross-Site Scripting XSS vulnerability has been identified, posing a severe security risk. This issue affects over two million websites, exposing them to potential...

6.5CVSS5.7AI score0.00098EPSS
Exploits0References4
Rows per page
Query Builder