CVE-2025-59829
Medium
Description
Claude Code is an agentic coding tool. Versions below 1.0.120 failed to account for symlinks when checking permission deny rules. If a user explicitly denied Claude Code access to a file and Claude Code had access to a symlink pointing to that file, it was possible for Claude Code to access the file. Users on standard Claude Code auto-update will have received this fix automatically. Users performing manual updates are advised to update to the latest version. This issue is fixed in version 1.0.120.
SeverityMedium
CVSS6.5
Exploit probability—
Product
Anthropic Claude Code
PublishedOct 3, 2025
First seenOct 3, 2025
Weakness typeCWE-61CWE-61
How to fix
Update
- anthropic claude_code1.0.120 or later
- @anthropic-ai/claude-code1.0.120 or later
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| anthropic claude_code | v < 1.0.120 | 1.0.120 |
| @anthropic-ai/claude-codenpm | v < 1.0.120 | 1.0.120 |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.