Evidence · DiggingBeagle record
Claude Code Edit TOCTOU workspace escape
Vendor security advisory for macOS symlink race across tool permissions.
- Published
- Oct 26, 2026
- Source role
- primary disclosure
Evidence record
Vendor security advisory for macOS symlink race across tool permissions.
Claim-level citations (2)
- supportsClaude Code Edit could write outside the workspace through a macOS symlink race: The advisory reports a time-of-check/time-of-use gap in Edit target validation and inode binding on macOS.
Description and technical preconditions
- supportsClaude Code Edit could write outside the workspace through a macOS symlink race: The affected package is @anthropic-ai/claude-code below 2.1.251; the patch is 2.1.251.
Affected and Patched Versions