Claude Code Deny Rule Bypass Vulnerability via Symbolic Links

A vulnerability exists in Claude Code prior to version 2.1.7, allowing the tool to bypass deny rules set in the settings.json file when accessing files through symbolic links. Users who denied access to specific files, such as /etc/passwd, could still have those files read by Claude Code if a symbolic link to the file was accessible, all without triggering the deny rule. This issue has been addressed in version 2.1.7.

Impact

Exploitation of this vulnerability could lead to unauthorized access to files that were explicitly denied in the user's settings, potentially allowing sensitive information to be read by Claude Code.

Remediation

Users of Claude Code who have the auto-update feature enabled have already received this fix. Those who update manually should download the latest version.