Claude Code Edit tool can overwrite files outside the workspace on macOS
This AI coding tool can overwrite files outside your project on Macs.
Summary
A timing gap in Claude Code's Edit tool lets code running in the Bash sandbox swap a workspace directory for a symlink, so the unsandboxed Edit tool can overwrite user-writable files outside the workspace. macOS users are affected.
Affected when
- macOS
- attacker code running inside the Bash sandbox (such as from a malicious repository or dependency script)
What to do
Update to 2.1.251 or later.
Products and platforms
CVE IDs
Sources
- CVE record: cve.org (opens in a new tab)
Times
First published
First seen