ACVE-2025-0005

The configuration

Configuration label

claude-code <1.0.20 + permissionMode auto|acceptEdits|bypassPermissions

Affected entries

• AgentHarness: claude-code — SEMVER (introduced 0; fixed 1.0.20)

Matcher

• all
  • harness.id eq "claude-code"
  • harness.version semverRange "<1.0.20"
  • permissionMode in [ "auto", "acceptEdits", "bypassPermissions" ]

Why it is exploitable

What the vulnerability is

Claude Code can execute commands under permissive approval modes when a vulnerable release handles tool requests without preserving the intended approval boundary. The affected harness range in this record is before 1.0.20. The security consequence is command execution with the permissions of the Claude Code process when an unsafe tool request reaches the command path.

Which configuration is exposed

The exposed combination is Claude Code with harness.id claude-code, a version below 1.0.20, and permissionMode set to auto, acceptEdits, or bypassPermissions. Those three values are the complete mode list encoded by the matcher. A default, plan, or other approval-requiring mode does not match this rule. The matcher does not identify a specific command, project, prompt, or MCP server, so a match is a broad approval-boundary warning.

How ACVE detects it

ACVE reads harness.id, harness.version, and permissionMode from the lockfile. It cannot see the exact tool request, whether a user would have approved it, or whether the process is operating in a trusted repository. The fixed boundary is treated here as 1.0.20 (unverified — see Grounding needed), so the finding should be rechecked against the referenced advisory before relying on the version comparison.

Fix

1. Upgrade Claude Code to 1.0.20 or later after confirming the fixed release.
2. Replace auto, acceptEdits, or bypassPermissions with an approval-required mode until the upgrade is complete.

Grounding needed

acve advisory ground must confirm the affected range, the fixed Claude Code release, and that the CVE-2025-54795 alias refers to this command-execution issue.

References

See references for primary sources.

Underlying CVEs / aliases

• CVE-2025-54795

Detect

npx @pickbitsai/acve audit

For CI, emit SARIF with npx @pickbitsai/acve audit --format sarif --out acve.sarif --apply and upload it with GitHub code scanning.

Fix

Upgrade Claude Code to the confirmed fixed release and require command approval.

Validation

No validation entries recorded.

Grounding

• OSV: not found; checked-at 2026-09-20T02:43:23Z
• NVD: found; checked-at 2026-09-20T02:43:23Z
• KEV: not listed in KEV; checked-at 2026-09-20T02:43:23Z

References

ADVISORY

• https://nvd.nist.gov/vuln/detail/CVE-2025-54795

REPORT

• https://example.com/research/acve

FIX

• https://github.com/pickbitsai/acve/issues?q=CVE-2025-54795