CVE-2026-88968: Path traversal flaw in Claude Code allows arbitrary file overwrite

# CVE-2026-88968: Path traversal flaw in Claude Code allows arbitrary file overwrite

https://gcdradar.vercel.app/incidents/cve-2026-88968-path-traversal-flaw-in-claude-code-allows-arb · AIR-2026-1741 · closed 2026-11-03

- Lane: Patch now
- Severity: 2 (Disclosed vulnerability): Disclosed vulnerability with a vendor fix available.
- Fix status: Patched
- First reported: 2026-11-03
- AI role: Attack on AI
- Products: Claude Code
- CVE ids: CVE-2026-88968
- CVSS: 7.7

## Summary

A path validation flaw in Claude Code prior to 2.1.251 allows malicious code running inside the Bash sandbox to overwrite user-writable files outside the workspace via symlink replacement. Anthropic released version 2.1.251 to address the vulnerability.

## What to do

Update Claude Code to version 2.1.251 or later.

## Affected and fixed versions

- Affected: Claude Code < 2.1.251
- Fixed in: Claude Code 2.1.251

## Latest updates

- 2026-11-09: GitHub advisory published (https://github.com/advisories/GHSA-5xjx-9qx6-jcrv)
- 2026-11-03: CVE-2026-88968: Claude Code is an agentic coding tool. (https://nvd.nist.gov/vuln/detail/CVE-2026-88968)

## Sources

- 2026-11-03 NVD: CVE-2026-88968: Claude Code is an agentic coding tool. https://nvd.nist.gov/vuln/detail/CVE-2026-88968
- 2026-11-09 GitHub Advisory Database: CVE-2026-88968: Claude Code: TOCTOU Race in Edit Tool Allows File Writes Outside the Workspace https://github.com/advisories/GHSA-5xjx-9qx6-jcrv

Verify against the vendor's advisory before changing production. Data CC BY-SA 4.0, https://gcdradar.vercel.app.