An Evening with Claude (Code)
ID: 7bf8c8c0-0338-593b-a24c-f54e1b63ebbc
STIX ID: report--7bf8c8c0-0338-593b-a24c-f54e1b63ebbc
Feed Name: XPN Infosec Blog
Threat Score
A researcher discovered a prompt-injection leading to local command execution in Claude Code by abusing insufficient validation of sed expressions and other command parsing checks; they developed proofs-of-concept, reported the issue to Anthropic, and it was fixed in v2.0.31 (CVE-2025-64755).
Your team is not currently subscribed to this feed. You must subscribe to it in order to see this post.