Vulnerability Description
Claude Code is an agentic coding tool. Prior to version 2.1.7, Claude Code failed to strictly enforce deny rules configured in settings.json when accessing files through symbolic links. If a user explicitly denied Claude Code access to a file (such as /etc/passwd) and Claude Code had access to a symbolic link pointing to that file, it was possible for Claude Code to read the restricted file through the symlink without triggering deny rule enforcement. This issue has been patched in version 2.1.7.
CVSS Score
HIGH
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Anthropic | Claude Code | < 2.1.7 |
Related Weaknesses (CWE)
References
- https://github.com/anthropics/claude-code/security/advisories/GHSA-4q92-rfm6-2cqThird Party Advisory
- https://www.terra.security/blog/when-ai-becomes-the-attack-surface-lessons-from-
FAQ
What is CVE-2026-25724?
CVE-2026-25724 is a vulnerability with a CVSS score of 7.5 (HIGH). Claude Code is an agentic coding tool. Prior to version 2.1.7, Claude Code failed to strictly enforce deny rules configured in settings.json when accessing files through symbolic links. If a user expl...
How severe is CVE-2026-25724?
CVE-2026-25724 has been rated HIGH with a CVSS base score of 7.5/10. Review the CVSS metrics above for detailed severity breakdown.
Is there a patch for CVE-2026-25724?
Check the references section above for vendor advisories and patch information. Affected products include: Anthropic Claude Code.