[BUG] Claude code default permissions broken with `:` in file path

Preflight Checklist

• [x] I have searched existing issues and this hasn't been reported yet
• [x] This is a single bug report (please file separate reports for different bugs)
• [x] I am using the latest version of Claude Code

What's Wrong?

Claude asks for permission to read files if there is a colon (:) in the file path.

> Read this page `normal/path/:id/page.tsx` and tell me what it is about

● I'll read that file for you.

● Read(normal/path/:id/page.tsx)

──────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────
 Read file

  Read(normal/path/:id/ties/page.tsx)

 Do you want to proceed?
 ❯ 1. Yes
   2. Yes, during this session
   3. No, and tell Claude what to do differently (esc)

What Should Happen?

Claude should be able to read all files by default. It can read any other file in my code base as long as the path does not contain a :.

Error Messages/Logs

Steps to Reproduce

Using WSL with Ubuntu 24.04.

mkdir -p test/:id
echo "hello" > test/:id/test.md
cd test
claude

In Claude:

Can you read :id/test.md and tell what is in the file

In >2.0.15 it asks for permission to read. In 2.0.15 I correctly get:

> Can you read :id/test.md and tell what is in the file

● I'll read the file :id/test.md for you.

● Read(:id/test.md)
  ⎿  Read 2 lines

● The file :id/test.md contains:

  hello

  It's a simple file with just the word "hello" on the first line, followed by a blank line.

Claude Model

Sonnet (default)

Is this a regression?

Yes, this worked in a previous version

Last Working Version

2.0.15

Claude Code Version

2.0.29 (Claude Code)

Platform

Anthropic API

Operating System

macOS

Terminal/Shell

Windows Terminal

Additional Information

This happens in both Claude Code terminal and the VS Code extension. I tried installing every version backwards and the last one where it can read the file without asking for permission is 2.0.15.