CVE-2026-25724

Everything Fervor AI has published that touches CVE-2026-25724 — 1 piece, newest first.

• Claude Code Just Patched Its Third Symlink Deny-Rule Bypass in Eleven Months

  A deny rule in an agent harness is not one policy but a separate implementation inside every part of the harness that touches the filesystem, and Claude Code has now…