CVE-2026-25724: Claude Code Has Permission Deny Bypass Through Symbolic Links
Claude Code failed to strictly enforce deny rules configured in settings.json when accessing files through symbolic links. If a user explicitly denied Claude Code access to a file (such as /etc/passwd) and Claude Code had access to a symbolic link pointing to that file, it was possible for Claude Code to read the restricted file through the symlink without triggering deny rule enforcement.
Users on standard Claude Code auto-update received this fix automatically. Users performing manual updates are advised to update to the latest version.
Claude Code thanks https://hackerone.com/ofirh for reporting this issue.
Other sources
Claude Code is an agentic coding tool. Prior to version 2.1.7, Claude Code failed to strictly enforce deny rules configured in settings.json when accessing files through symbolic links. If a user explicitly denied Claude Code access to a file (such as /etc/passwd) and Claude Code had access to a symbolic link pointing to that file, it was possible for Claude Code to read the restricted file through the symlink without triggering deny rule enforcement. This issue has been patched in version 2.1.7.
— MITRE
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2026-25724?
CVE-2026-25724 has been categorized with a significant severity due to the potential for unauthorized file access.
How do I fix CVE-2026-25724?
To fix CVE-2026-25724, upgrade Claude Code to version 2.1.7 or later, which addresses the permission bypass issue.
What does the CVE-2026-25724 vulnerability affect?
CVE-2026-25724 affects Claude Code versions prior to 2.1.7, specifically in how it handles symbolic links and deny permissions.
What are the risks associated with CVE-2026-25724?
The risks associated with CVE-2026-25724 include unauthorized access to sensitive files, which can compromise system security.
Is CVE-2026-25724 a common vulnerability?
CVE-2026-25724 is considered a critical vulnerability particularly for applications that rely on strict file access controls.