Claude Code: Sandbox Escape via Symlink Following Allows Arbitrary File Write Outside Workspace

Claude Code Has Sandbox Escape via Persistent Configuration Injection in settings.json

Claude Code Command Validation Bypass Allows Arbitrary Code Execution

@anthropic-ai/claude-code has Sed Command Validation Bypass that Allows Arbitrary File Writes

Claude Code vulnerable to command execution prior to startup trust dialog

Claude Code Vulnerable to Arbitrary Code Execution via Plugin Autoloading with Specific Yarn Versions

Claude Code vulnerable to arbitrary code execution caused by maliciously configured git email

Claude Code rg command had Command Injection that allowed bypass of user approval prompt for command execution

Claude Code echo command allowed bypass of user approval prompt for command execution

Claude Code: Out-of-Band Data Exfiltration via Pre-Approved HuggingFace Domain in WebFetch

Claude Code Vulnerable to Command Injection via Directory Change Bypasses Write Protection

Claude Code Research Preview has a Path Restriction Bypass which could allow unauthorized file access

Claude Code: Sandbox Escape via Git Worktree Path Confusion Allows Unsandboxed Code Execution

Claude Code arbitrary code execution via git worktree commondir trust dialog bypass

Claude Code has a Workspace Trust Dialog Bypass via Repo-Controlled Settings File

Claude Code has a Command Injection in find Command Bypasses User Approval Prompt

Claude Code's startup trust dialog could lead to Command Execution attack

Claude Code Has Permission Deny Bypass Through Symbolic Links

Claude Code Leaks Data via Malicious Environment Configuration Before Trust Confirmation

Claude Code's Permissive Default Allowlist Enables Unauthorized File Read and Network Exfiltration in Claude Code

Claude Code has a Domain Validation Bypass which Allows Automatic Requests to Attacker-Controlled Domains

Claude Code: Insecure System-Wide Configuration Loading Enables Local Privilege Escalation on Windows

Claude Code Vulnerable to Command Injection via Piped sed Command Bypasses File Write Restrictions

Cluade Code has a Path Restriction Bypass via ZSH Clobber which Allows Arbitrary File Writes

Claude Code: Permission deny bypass is possible through symlink

Claude Code: Insecure Temporary File in /copy Command Enables Response Disclosure and Symlink-Based File Write