Proof of Concept for CVE-2025-65099

Further details are provided in the published article.

yarnPath Technique

A vulnerable environment for yarnPath can be initialized as follows:

docker run --rm -v "${PWD}":/poc -it --workdir /poc ubuntu bash -c 'apt-get update -qq && DEBIAN_FRONTEND=noninteractive apt-get install npm -y -qq && npm install -g yarn && npm install -g @anthropic-ai/[email protected] && bash'

After installation, running claude should result in a file proof.txt to be present in the working directory.

Plugin Technique

A vulnerable environment can be initialized as follows:

docker run --rm -v "${PWD}":/poc -it --workdir /poc ubuntu bash -c 'apt-get update -qq && DEBIAN_FRONTEND=noninteractive apt-get install npm -y -qq && npm install -g corepack && npm install -g @anthropic-ai/[email protected] && bash'

After installation, running claude should result in a file proof.txt to be present in the working directory. This may be slightly unreliable.