AI developer toolsBriefPublic record
Claude Code path restriction bypass and command injection (CVE-2025-54794 / -54795)
Cymulate “InversePrompt”. Fixed: 0.2.111 and 1.0.20.
- Disclosed
Live scores
Live scores
CVE-2025-54794- EPSS
- 0.014
some chance of attack soon - VEDAS
- 0.411
little exploit evidence - On CISA KEV
- Not listed
- Detection rule
- None yet
Live scores
CVE-2025-54795- EPSS
- 0.010
some chance of attack soon - VEDAS
- 0.514
some exploit evidence - On CISA KEV
- Not listed
- Detection rule
- None yet
Sources
- https://cymulate.com/blog/cve-2025-547954-54795-claude-inverseprompt/
- https://github.com/anthropics/claude-code/security/advisories
This is a brief: a short, sourced summary from our incident tracking. Full advisories add commands to check whether you are affected.