CVE-2025-54795: Anthropic Claude Code

Critical severity, CVSS 9.8. EPSS: 1% chance of exploitation in the next 30 days.

Claude Code is an agentic coding tool. In versions below 1.0.20, an error in command parsing makes it possible to bypass the Claude Code confirmation prompt to trigger execution of an untrusted command. Reliably exploiting this requires the ability to add untrusted content into a Claude Code context window. This is fixed in version 1.0.20.

Affected products

• Anthropic Claude Code: before 1.0.20 (fixed in 1.0.20)

Published 2025-08-05. Last modified 2026-06-17.