Symlink Vulnerability in Claude Code Agentic Tool by Anthropic
CVE-2026-88968

7.7HIGH

Key Information:

Vendor

Anthropics

Status
Claude-code
Vendor
CVE Published:
3 November 2026

What is CVE-2026-88968?

The vulnerability in Claude Code allows an attacker to exploit pathname and symlink resolution issues associated with the Edit tool. Prior to version 2.1.251, malicious code executed within the Bash sandbox could manipulate the target directory, replacing it with a symlink. This could lead to the unsandboxed Edit tool overwriting files outside of the intended workspace. Exploitation necessitates control over code running in the sandbox, including potential sources like compromised repositories or malicious dependency scripts. Users are urged to update to version 2.1.251 to mitigate this risk.

Affected Version(s)

claude-code < 2.1.251

References

https://github.com/anthropics/claude-code/security/adviso...
x_refsource_CONFIRM
https://github.com/anthropics/claude-code/releases/tag/v2...
x_refsource_MISC

CVSS V4

Score:
7.7
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Attack Required:
Physical
Privileges Required:
Undefined
User Interaction:
Unknown

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.