CVE-2025-64755 @anthropic-ai/claude-code has Sed Command Validation Bypass that Allows Arbitrary File Writes

What is CVE-2025-64755?

CVE-2025-64755 is a high-severity command injection vulnerability in anthropics claude-code, published on 21 Nov 2025. An attacker can exploit it over the internet without logging in, and only if a user opens a file or follows a link.

Official description

Claude Code is an agentic coding tool. Prior to version 2.0.31, due to an error in sed command parsing, it was possible to bypass the Claude Code read-only validation and write to arbitrary files on the host system. This issue has been patched in version 2.0.31.

Weakness: CWE-78

Which versions are affected by CVE-2025-64755?

2 open source packages ship an affected version, including @anthropic-ai/claude-code. It affects 1 product.

Products include Anthropic Claude Code.

How do I fix CVE-2025-64755?

Upgrade @anthropic-ai/claude-code to 2.0.31 or later.

Upgrade, and pass arguments to programs as a list instead of through a shell. More about Command injection.

Is CVE-2025-64755 being exploited?

There is no known exploitation of CVE-2025-64755 in the wild and no public exploit code.

Other vulnerabilities in anthropics claude-code

• CVE-2025-66032 Claude Code Command Validation Bypass Allows Arbitrary Code Execution High 8.7
• CVE-2025-59536 Claude Code's startup trust dialog could lead to Command Execution attack High 8.7
• CVE-2025-58764 Claude Code rg command had Command Injection that allowed bypass of user approval prompt for command execution High 8.7
• CVE-2025-59041 Claude Code vulnerable to arbitrary code execution caused by maliciously configured git email High 8.7
• CVE-2025-54795 Claude Code echo command allowed bypass of user approval prompt for command execution High 8.7

Sources

• CVE record
• NVD
• OSV
• GitHub advisory
• How this page is made

Also known as GHSA-7mv8-j34q-vp7q.