Claude Code Command Injection Vulnerability Bypasses File Write Restrictions

A command injection vulnerability has been identified in Claude Code versions prior to 2.0.55. The issue arises from improper validation of commands that use piped sed operations with the echo command. This flaw allows attackers to bypass file write restrictions and write to sensitive directories, such as the .claude folder, as well as paths outside the project scope. Exploitation of this vulnerability requires the 'accept edits' feature to be enabled.

Impact

Exploitation of this vulnerability allows for unauthorized command execution, leading to potential manipulation of files in sensitive directories and beyond the project's designated paths.

Remediation

Users on standard Claude Code auto-update received this fix automatically. Users performing manual updates are advised to update to the latest version.