English(EN) Claude Code below 2.1.251 let code in its Bash sandbox redirect an Edit outside the workspace on macOS (CVE-2026-88968)

Claude Code 漏洞允许在 macOS 沙盒外执行代码

作者 PulseAugur 编辑部 · [1 个来源] · 2026-11-12 02:17

在 Claude Code 2.1.251 及更早版本中发现了一个安全漏洞，CVE-2026-88968，该漏洞特别影响 macOS 用户。该缺陷允许 Bash 沙盒内的恶意代码操纵目录权限，从而在指定工作区外进行未经授权的文件修改。这是三周内 Claude Code 文件写入机制中出现的第二个此类漏洞，凸显了检查时到使用时（time-of-check to time-of-use）竞争条件这一反复出现的问题。 AI

影响此漏洞可能允许攻击者在 macOS 上破坏用户文件和系统配置，因此 Claude Code 用户需要及时更新。

排序理由该条目描述了软件产品中的特定安全漏洞。

在 dev.to — Claude Code tag 阅读 →

AI 生成摘要 · Google Gemini · 来自 1 个来源。我们如何撰写摘要 →

本文如何被排名

Signal score: 33 / 100; Composite score across the factors below. Higher = stronger signal that this story matters right now.
Newsworthiness bucket: Tool; 该条目描述了软件产品中的特定安全漏洞。
Source corroboration: Single-source cluster; Only one publisher covered this so far. Single-source stories can still rank when the publisher is high-authority, but they lack cross-source corroboration.
Topics: product, safety; Editorial topic classification. Feeds into how the story surfaces on /topic/<slug> hub pages and into the per-entity coverage mix.
AI-industry relevance: High; Clearly on-topic for AI-industry coverage.
Story freshness: Breaking (< 6h); Fresh story with cross-source coverage still developing. Ranking may shift as more sources report.

完整方法见我们的编辑标准。

报道来源 [1]

dev.to — Claude Code tag TIER_1 English(EN) · Rulestack · 2026-11-12 02:17

Claude Code below 2.1.251 let code in its Bash sandbox redirect an Edit outside the workspace on macOS (CVE-2026-88968)

<blockquote> <p>Claude Code's sandbox isolates shell commands, and its file tools run outside it. CVE-2026-88968, published on 2026-10-26 and fixed in 2.1.251, used the gap between the two on macOS: code running inside the Bash sandbox could swap a folder for a symlink after the …

本文如何被排名

报道来源 [1]

Claude Code below 2.1.251 let code in its Bash sandbox redirect an Edit outside the workspace on macOS (CVE-2026-88968)

相关实体

相关话题