Claude Code Permission Deny Bypass Vulnerability via Symlink

A permission deny bypass vulnerability has been identified in Claude Code versions prior to 1.0.120. The issue arises because the tool does not properly consider symlinks when enforcing permission deny rules. If a user explicitly denies Claude Code access to a file, but the tool has access to a symlink pointing to that file, it can still access the file. This vulnerability has a low severity rating.

Impact

Exploitation of this vulnerability allows Claude Code to bypass permission deny rules and access files that should be restricted, potentially leading to unauthorized data exposure.

Remediation

Users on standard Claude Code auto-update will have received the fix automatically. Those performing manual updates should update to the latest version.