Claude Code Before 2.1.251 Let Sandboxed Code Overwrite Files Outside the Workspace on macOS (CVE-2026-88968)
Code already in Claude Code's Bash sandbox could race the Edit tool through a swapped symlink and overwrite user files outside the workspace. Fixed in 2.1.251.
· 3 min