CVE-2025-59829 - CVE House
Back to Database
Status published Low CVE-2025-59829

Claude Code: Permission deny bypass is possible through symlink

Vulnerability Description

Claude Code is an agentic coding tool. Versions below 1.0.120 failed to account for symlinks when checking permission deny rules. If a user explicitly denied Claude Code access to a file and Claude Code had access to a symlink pointing to that file, it was possible for Claude Code to access the file. Users on standard Claude Code auto-update will have received this fix automatically. Users performing manual updates are advised to update to the latest version. This issue is fixed in version 1.0.120.

Impact Analysis

Refer to official advisory for detailed impact metrics.

Remediation

Ensure systems are updated to the latest vendor-supplied patch levels.

THREAT MONITOR

Am I Vulnerable?

Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2025-59829

Credits & Attribution

No credits recorded in the NVD database.

References

More from anthropics

View All →
CVE-2025-66032
Claude Code Command Validation Bypass Allows Arbitrary Code Execution
High 8.7
CVE-2025-65099
Claude Code vulnerable to command execution prior to startup trust dialog
High 7.7
CVE-2025-64755
@anthropic-ai/claude-code has Sed Command Validation Bypass that Allows Arbitrary File Writes
High 8.7
CVE-2025-59828
Claude Code Vulnerable to Arbitrary Code Execution via Plugin Autoloading with Specific Yarn Versions
High 7.7
CVE-2025-59536
Claude Code's startup trust dialog could lead to Command Execution attack
High 8.7

Affected Vendor

Affected Software

claude-code
Vulnerable Versions:
< 1.0.120

Timeline

Official Publish: October 3rd, 2025
Last Modified: October 3rd, 2025
Added to House: July 22nd, 2026

CVSS Vectors

Weaknesses (CWE)

CWE-61

MITRE ATT&CK TTPs

No associated TTPs found for this vulnerability.