$ the-wire · showcase
Claude Code symlink TOCTOU allows arbitrary file write
By RepoJournal · Filed · About Anthropic · Composed from the cited sources · methodology
2 people shipped this
A write-time symlink following flaw in Claude Code headlines a day otherwise made of version syncs across the action, base-action, and Python SDK, plus a new Lean 4 formalization in the math repo.
Arbitrary File Write via Write-Time Symlink Following (TOCTOU) in Claude Code anthropics/claude-code
Claude Code's file writes follow symlinks at write time, a TOCTOU race that lets an attacker redirected write land outside the intended path. Anyone running Claude Code against a repo where another process or contributor can create symlinks should treat this as the day's only actionable item.
Add 3sum-apsp: formalization of "Truly Subquadratic 3SUM and Truly Subcubic APSP via Triangles in Sparse Lopsided Graphs" anthropics/formal-math
The formal-math repo gains 3sum-apsp, a Lean 4 project accompanying the paper on truly subquadratic 3SUM and truly subcubic APSP via triangles in sparse lopsided graphs. It is self-contained on Lean and Mathlib v4.33.1 with no other dependency, and EndStatement.lean imports nothing, stating five headline claims about word RAM programs.
Add 3sum-apsp: formalization of "Truly Subquadratic 3SUM and Truly Subcubic APSP via Triangles in Sparse Lopsided Graphs" (#28) anthropics/formal-math
The accompanying CI change adjusts lean4export pinning: a project on stable patch release vX.Y.Z with Z > 0 now takes the vX.Y.0 tag when no tag for the exact patch exists, building it with the project's toolchain. Release candidates get no fallback, and projects whose exact tag exists are checked as before.
chore: Update CHANGELOG.md and feed.xml anthropics/claude-code
The generated CHANGELOG.md and feed.xml were refreshed for Claude Code.
chore: bump Claude Code to 2.1.291 and Agent SDK to 0.3.291 anthropics/claude-code-action
The action, base-action, and Python SDK all moved to Claude Code 2.1.291 and Agent SDK 0.3.291 in lockstep, with base-action picking up the 2.1.290 sync in the same window and the Python SDK bumping only its bundled CLI.
Action items
- → Update Claude Code to a build with the symlink fix and avoid running file writes in directories where untrusted symli... anthropics/claude-code [immediate]
