Claude Code Arbitrary File Write Vulnerability via Sed Command Validation Bypass

A vulnerability in Claude Code prior to version 2.0.31 allows users to bypass the read-only validation and write to arbitrary files on the host system. This issue arises from an error in the parsing of sed commands, which could be exploited to manipulate file writing permissions. The vulnerability has been patched in version 2.0.31.

Impact

Exploitation of this vulnerability could lead to unauthorized writing of files on the host system, potentially allowing for the modification of critical system or application files.

Remediation

Users on the standard Claude Code auto-update will have received the fix automatically. Those performing manual updates should update to the latest version.