C_H4Ck_0

**Name of the Vulnerable Software and Affected Versions** @anthropic-ai/claude-code versions 2.1.59 through 2.1.127 **Description** The `/copy` command writes responses to a hardcoded and predictable path `/tmp/claude/response.md` without UID isolation, randomness, or symlink protection. The resulting file is created with world-readable permissions (0644) within a world-traversable directory (0755). This allows any local unprivileged user to read responses generated by a privileged user, potentially exposing secrets, credentials, or API tokens. Furthermore, a local attacker can plant a symbolic link (symlink) at the predictable path, causing the privileged process to follow the link and overwrite an arbitrary system file with the response content, which could lead to privilege escalation or system compromise. **Recommendations** Update @anthropic-ai/claude-code to version 2.1.128.