Claude Code: Sandbox Escape via Symlink Following Allows Arbitrary File Write Outside Workspace

Claude Code Has Sandbox Escape via Persistent Configuration Injection in settings.json

Claude Code Command Validation Bypass Allows Arbitrary Code Execution

@anthropic-ai/claude-code has Sed Command Validation Bypass that Allows Arbitrary File Writes

Claude Code vulnerable to command execution prior to startup trust dialog

Claude Code Vulnerable to Arbitrary Code Execution via Plugin Autoloading with Specific Yarn Versions

Claude Code vulnerable to arbitrary code execution caused by maliciously configured git email

Claude Code rg command had Command Injection that allowed bypass of user approval prompt for command execution

Claude Code echo command allowed bypass of user approval prompt for command execution

Claude Code: Out-of-Band Data Exfiltration via Pre-Approved HuggingFace Domain in WebFetch

Claude Code Vulnerable to Command Injection via Directory Change Bypasses Write Protection

Claude Code Research Preview has a Path Restriction Bypass which could allow unauthorized file access