CVE-2025-59829 LOW

CVE-2025-59829: Claude Code: Permission deny bypass is possible through symlink

Vendor Anthropics
Product claude-code
Weakness CWE-61
Published October 3, 2025
Last update October 3, 2025
View on NVD All CVEs

CVSS base score

2.3/10
Attack vector Network
Attack complexity Low
Privileges required None
User interaction —
Confidentiality —
Integrity —

CVSS vector

CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:P/VC:L/VI:L/VA:N/SC:N/SI:N/SA:N

What the vulnerability does

01Description

Claude Code is an agentic coding tool. Versions below 1.0.120 failed to account for symlinks when checking permission deny rules. If a user explicitly denied Claude Code access to a file and Claude Code had access to a symlink pointing to that file, it was possible for Claude Code to access the file. Users on standard Claude Code auto-update will have received this fix automatically. Users performing manual updates are advised to update to the latest version. This issue is fixed in version 1.0.120.

Key dates

02Disclosure timeline

October 3, 2025 CVE published
October 3, 2025 Record updated

Related vulnerabilities

04Related CVE

CVE-2026-31893 Tunnelblick arbitrary file read via symlink following in tunnelblickd CVE-2025-67487 Static Web Server is vulnerable to symbolic link Path Traversal CVE-2026-25724 Claude Code Has Permission Deny Bypass Through Symbolic Links CVE-2025-10854 Symlink Following in txtai leads to arbitrary file write when loading untrusted embedding indices CVE-2026-23986 Copier safe template has arbitrary filesystem write access via directory symlinks when _preserve_symlinks: true