| Package | Affected versions | Patched versions |
|---|---|---|
| claude code | < 2.0.31 | 2.0.31 |
| @anthropic-ai/claude-code | < 2.0.31 | 2.0.31 |
Due to an error in sed command parsing, it was possible to bypass the Claude Code read-only validation and write to arbitrary files on the host system.
Users on standard Claude Code auto-update will have received this fix automatically. Users performing manual updates are advised to update to the latest version.
Thank you to Adam Chester - SpecterOps for reporting this issue!
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free