Executive Summary

CVE-2026-25722 is a high-severity vulnerability in the Claude Code tool prior to version 2.0.57. The issue occurs because the software fails to properly validate directory changes when combined with write operations to protected folders.

Specifically, an attacker could use the cd command to navigate into sensitive directories like .claude and bypass write protection, allowing them to create or modify files without user confirmation.

Exploitation requires the ability to inject untrusted content into a Claude Code context window. This vulnerability involves improper input validation and improper neutralization of special elements used in OS commands.

Useful 0 Not Useful 0

Impact Analysis

Successful exploitation of this vulnerability can impact the confidentiality, integrity, and availability of the affected system at a high level.

• Confidentiality: Unauthorized creation or modification of files in protected directories can expose sensitive data.
• Integrity: Attackers can alter files without user confirmation, potentially injecting malicious code or corrupting data.
• Availability: Malicious modifications could disrupt normal operations or cause system instability.

The vulnerability has a network attack vector, low attack complexity, requires no privileges, and only passive user interaction, making it relatively easy to exploit if the attacker can inject untrusted content.

Useful 0 Not Useful 0

Compliance Impact

I don't know

Useful 0 Not Useful 0

Detection Guidance

Detection of this vulnerability involves identifying attempts to use the `cd` command within Claude Code to navigate into protected directories such as `.claude` and perform write operations without user confirmation.

Since exploitation requires injecting untrusted content into a Claude Code context window, monitoring logs or command histories for unusual directory changes or write attempts to protected folders may help detect exploitation attempts.

Specific commands to detect this vulnerability are not provided in the available resources.

Useful 0 Not Useful 0

Mitigation Strategies

The immediate mitigation step is to upgrade Claude Code to version 2.0.57 or later, where the vulnerability has been patched.

Users who rely on manual updates should promptly apply this update to prevent exploitation.

Additionally, avoid injecting untrusted content into Claude Code context windows to reduce the risk of exploitation.

Useful 0 Not Useful 0