CVE-2026-25724

描述

Claude Code failed to strictly enforce deny rules configured in settings.json when accessing files through symbolic links. If a user explicitly denied Claude Code access to a file (such as /etc/passwd) and Claude Code had access to a symbolic link pointing to that file, it was possible for Claude Code to read the restricted file through the symlink without triggering deny rule enforcement. Users on standard Claude Code auto-update received this fix automatically. Users performing manual updates are advised to update to the latest version. Claude Code thanks https://hackerone.com/ofirh for reporting this issue.

如何修補 CVE-2026-25724

要修補 CVE-2026-25724,請將受影響套件升級到下列已修補版本。

• —升級至 2.1.7 或更新版本

CVE-2026-25724 正在被利用嗎?

低 — EPSS 為 0.4%,目前沒有觀察到大規模利用活動。

受影響套件(1)

• from 0, < 2.1.7

CVSS 分數

參考連結(4)

• ADVISORYnvd.nist.gov/vuln/detail/CVE-2026-25724
• PATCHgithub.com/anthropics/claude-code
• WEBgithub.com/anthropics/claude-code/security/advisories/GHSA-4q92-rfm6-2cqx
• WEBwww.terra.security/blog/when-ai-becomes-the-attack-surface-lessons-from-discovering-cve-2026-25724