CVE-2025-66032

Critical

Published: 03/12/2025(UTC)Translated: 05/08/2026(UTC)NVD NIST

Summary

Claude Code before 1.0.93 has a parsing error in shell commands related to $IFS and short CLI flags, allowing bypass of read-only validation and arbitrary code execution. This requires adding untrusted content to the Claude Code context.

Risk Assessment

An attacker can execute arbitrary code in the user's context, potentially leading to session takeover or compromise of the development environment.

Recommendation

Update Claude Code to version 1.0.93 or later. Avoid adding unverified content to the context.

Original NVD description (English source)

Claude Code is an agentic coding tool. Prior to 1.0.93, Due to errors in parsing shell commands related to $IFS and short CLI flags, it was possible to bypass the Claude Code read-only validation and trigger arbitrary code execution. Reliably exploiting this requires the ability to add untrusted content into a Claude Code context window. This vulnerability is fixed in 1.0.93.