CVE-2025-54795— Claude Code echo command allowed bypass of user approval prompt for command execution
Quick assessment
Affected
anthropics claude-code
Exploitation
Public or AI PoC available; prioritize validation
Recommended action
Check the vendor advisory and references for a fixed version. If immediate upgrade is impossible, restrict exposure and increase monitoring.
Claude Code是Anthropic开源的一个代理编码工具。 Claude Code 1.0.20之前版本存在操作系统命令注入漏洞，该漏洞源于命令解析错误，可能导致未经确认执行不受信任的命令。
Possible ATT&CK Techniques 1 AI
T1059 · Command and Scripting Interpreter
Get alerts for future matching vulnerabilities
Log in to subscribe
I. Basic Information for CVE-2025-54795
Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
Claude Code echo command allowed bypass of user approval prompt for command execution
Source: CVE Program / CVE List V5
Vulnerability Description
Claude Code is an agentic coding tool. In versions below 1.0.20, an error in command parsing makes it possible to bypass the Claude Code confirmation prompt to trigger execution of an untrusted command. Reliably exploiting this requires the ability to add untrusted content into a Claude Code context window. This is fixed in version 1.0.20.
Source: CVE Program / CVE List V5
CVSS Information
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
Source: CVE Program / CVE List V5
Vulnerability Type
OS命令中使用的特殊元素转义处理不恰当(OS命令注入)
Source: CVE Program / CVE List V5
Vulnerability Title
Claude Code 操作系统命令注入漏洞
Source: CNNVD (China National Vulnerability Database)
Vulnerability Description
Claude Code是Anthropic开源的一个代理编码工具。 Claude Code 1.0.20之前版本存在操作系统命令注入漏洞，该漏洞源于命令解析错误，可能导致未经确认执行不受信任的命令。
Source: CNNVD (China National Vulnerability Database)
CVSS Information
N/A
Source: CNNVD (China National Vulnerability Database)
Vulnerability Type
N/A
Source: CNNVD (China National Vulnerability Database)
Affected Products
| Vendor | Product | Affected Versions | CPE | Subscribe |
|---|---|---|---|---|
| anthropics | claude-code | < 1.0.20 | - |
|
II. Public POCs for CVE-2025-54795
| # | POC Description | Source Link | Shenlong Link |
|---|---|---|---|
| 1 | Ralph Wiggum plugin implementation that works after the CVE-2025-54795 security patch | https://github.com/dial481/ralph | POC Details |
| 2 | Ralph Wiggum plugin implementation that works after the CVE-2025-54795 security patch | https://github.com/alonisser/ralph | POC Details |
AI-Generated POC
Premium
No public POC found.
Login to generate AI POCIII. Intelligence Information for CVE-2025-54795
请登录查看更多情报信息。
IV. Related Vulnerabilities
Same product: claude-code
-
CVE-2026-55607
Claude Code: Sandbox Escape via Git Worktree Path Confusion -
CVE-2026-46406
Claude Code: Insecure Temporary File in /copy Command Enable -
CVE-2026-54316
Claude Code: Out-of-Band Data Exfiltration via Pre-Approved -
CVE-2026-44470
Claude Desktop: Local Privilege Escalation via Directory Jun -
CVE-2026-44467
Claude Desktop: SSH Host Key Verification Bypass Allows Man-
Same vendor: anthropics
-
CVE-2026-47751
Claude Code Action: Malicious MCP Server Configuration in PR -
CVE-2026-55407
Buffa: Memory Exhaustion Denial of Service in decode_unknown -
CVE-2026-55406
Buffa: Use-After-Free in OwnedView via Unsound 'static Lifet -
CVE-2026-55607
Claude Code: Sandbox Escape via Git Worktree Path Confusion -
CVE-2026-46406
Claude Code: Insecure Temporary File in /copy Command Enable
Same weakness: CWE-78
-
CVE-2026-105134
Ahsay AhsayCBS Replication Receiver UpdateReceivers.do os co -
CVE-2026-75937
OS Command Injection in Digi Accelerated Linux (DAL OS) -
CVE-2026-104019
OS command injection in the Studio Space startup validation -
CVE-2026-104859
Nx: OS command injection in the @nx/docker release pipeline -
CVE-2026-93698
Multilang adminbin验证不足致任意命令执行
V. Comments for CVE-2025-54795
No comments yet