{"id":"EUVD-2025-198355","enisaUuid":"b4f59b48-269a-37c9-b28c-b7d872ed0ca8","description":"Claude Code is an agentic coding tool. Prior to version 2.0.31, due to an error in sed command parsing, it was possible to bypass the Claude Code read-only validation and write to arbitrary files on the host system. This issue has been patched in version 2.0.31.","datePublished":"Nov 21, 2025, 1:13:05 AM","dateUpdated":"Nov 24, 2025, 6:13:06 PM","baseScore":8.7,"baseScoreVersion":"4.0","baseScoreVector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N","references":"https://github.com/anthropics/claude-code/security/advisories/GHSA-7mv8-j34q-vp7q\n","aliases":"CVE-2025-64755\nGHSA-7mv8-j34q-vp7q\n","assigner":"GitHub_M","epss":0.62,"enisaIdProduct":[{"id":"d2bb81db-70be-3db2-9910-bb42e1e74bd3","product":{"name":"claude-code","vendor":{"name":"anthropics"}},"product_version":"\u003c 2.0.31"}],"enisaIdVendor":[{"id":"96afbb93-dbdf-3934-832e-6c5d32ff9ded","vendor":{"name":"anthropics"}}],"enisaIdVulnerability":[{"id":"110c0f3e-191b-3c1e-b161-0c70d840163a","vulnerability":{"id":"GHSA-7mv8-j34q-vp7q","description":"@anthropic-ai/claude-code has Sed Command Validation Bypass that Allows Arbitrary File Writes","datePublished":"Nov 20, 2025, 9:28:08 PM","dateUpdated":"Nov 21, 2025, 3:32:13 PM","baseScore":0.0,"references":"https://github.com/anthropics/claude-code/security/advisories/GHSA-7mv8-j34q-vp7q\nhttps://nvd.nist.gov/vuln/detail/CVE-2025-64755\nhttps://github.com/anthropics/claude-code\n","enisa_id":"EUVD-2025-198355\n","aliases":"GHSA-7mv8-j34q-vp7q\nCVE-2025-64755\n","epss":0.0,"dataProcessed":"Nov 1, 2026, 1:56:19 AM","vulnerabilityProduct":[],"vulnerabilityVendor":[]}},{"id":"6924a5ee-7f94-3e4a-a58d-8120a74723b9","vulnerability":{"id":"CVE-2025-64755","description":"Claude Code is an agentic coding tool. Prior to version 2.0.31, due to an error in sed command parsing, it was possible to bypass the Claude Code read-only validation and write to arbitrary files on the host system. This issue has been patched in version 2.0.31.","datePublished":"Nov 21, 2025, 1:13:05 AM","dateUpdated":"Nov 24, 2025, 6:13:06 PM","status":"PUBLISHED","baseScore":8.7,"baseScoreVersion":"4.0","baseScoreVector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N","references":"https://github.com/anthropics/claude-code/security/advisories/GHSA-7mv8-j34q-vp7q\n","enisa_id":"EUVD-2025-198355\n","assigner":"GitHub_M","epss":0.62,"dataProcessed":"Nov 1, 2026, 1:38:11 AM","vulnerabilityProduct":[{"id":"2a513cae-b271-3c7b-9e37-c19eb4129228","product":{"name":"claude-code","vendor":{"name":"anthropics"}},"product_version":"\u003c 2.0.31"}],"vulnerabilityVendor":[{"id":"2c05e2dc-bc4d-3a40-bdd3-cfd80db6f721","vendor":{"name":"anthropics"}}]}}],"enisaIdAdvisory":[]}