[Bug] Critical Security Vulnerability in Claude Code

Resolved 💬 5 comments Opened Aug 26, 2025 by crsCR Closed Jan 4, 2026

Bug Description
Critical security issues!

Environment Info

  • Platform: win32
  • Terminal: null
  • Version: 1.0.90
  • Feedback ID: a94fd89f-d14f-49d3-8cf6-4b482fc78440

Errors

[{"error":"Error: EPERM: operation not permitted, open 'C:\\Users\\Chris\\.claude\\statsig\\statsig.session_id.2656274335'\n    at writeFileSync (node:fs:2425:20)\n    at up1.setItem (file:///C:/Users/Chris/AppData/Roaming/npm/node_modules/@anthropic-ai/claude-code/cli.js:690:8098)\n    at Object.setItem (file:///C:/Users/Chris/AppData/Roaming/npm/node_modules/@anthropic-ai/claude-code/cli.js:64:18795)\n    at Object.H_Q [as _setObjectInStorage] (file:///C:/Users/Chris/AppData/Roaming/npm/node_modules/@anthropic-ai/claude-code/cli.js:64:19102)\n    at wxQ (file:///C:/Users/Chris/AppData/Roaming/npm/node_modules/@anthropic-ai/claude-code/cli.js:64:43604)\n    at UxQ (file:///C:/Users/Chris/AppData/Roaming/npm/node_modules/@anthropic-ai/claude-code/cli.js:64:43061)\n    at Object.get (file:///C:/Users/Chris/AppData/Roaming/npm/node_modules/@anthropic-ai/claude-code/cli.js:64:42666)\n    at Object.get (file:///C:/Users/Chris/AppData/Roaming/npm/node_modules/@anthropic-ai/claude-code/cli.js:64:42562)\n    at vxQ (file:///C:/Users/Chris/AppData/Roaming/npm/node_modules/@anthropic-ai/claude-code/cli.js:64:50400)\n    at Po0._getInternalRequestArgs (file:///C:/Users/Chris/AppData/Roaming/npm/node_modules/@anthropic-ai/claude-code/cli.js:64:50173)","timestamp":"2025-08-26T02:19:38.855Z"},{"error":"Error: EPERM: operation not permitted, open 'C:\\Users\\Chris\\.claude\\statsig\\statsig.session_id.2656274335'\n    at writeFileSync (node:fs:2425:20)\n    at up1.setItem (file:///C:/Users/Chris/AppData/Roaming/npm/node_modules/@anthropic-ai/claude-code/cli.js:690:8098)\n    at Object.setItem (file:///C:/Users/Chris/AppData/Roaming/npm/node_modules/@anthropic-ai/claude-code/cli.js:64:18795)\n    at Object.H_Q [as _setObjectInStorage] (file:///C:/Users/Chris/AppData/Roaming/npm/node_modules/@anthropic-ai/claude-code/cli.js:64:19102)\n    at wxQ (file:///C:/Users/Chris/AppData/Roaming/npm/node_modules/@anthropic-ai/claude-code/cli.js:64:43604)\n    at UxQ (file:///C:/Users/Chris/AppData/Roaming/npm/node_modules/@anthropic-ai/claude-code/cli.js:64:43061)\n    at Object.get (file:///C:/Users/Chris/AppData/Roaming/npm/node_modules/@anthropic-ai/claude-code/cli.js:64:42666)\n    at Object.get (file:///C:/Users/Chris/AppData/Roaming/npm/node_modules/@anthropic-ai/claude-code/cli.js:64:42562)\n    at Po0.<anonymous> (file:///C:/Users/Chris/AppData/Roaming/npm/node_modules/@anthropic-ai/claude-code/cli.js:64:48464)\n    at Generator.next (<anonymous>)","timestamp":"2025-08-26T02:19:38.856Z"},{"error":"Error: EPERM: operation not permitted, open 'C:\\Users\\Chris\\.claude\\statsig\\statsig.session_id.2656274335'\n    at writeFileSync (node:fs:2425:20)\n    at up1.setItem (file:///C:/Users/Chris/AppData/Roaming/npm/node_modules/@anthropic-ai/claude-code/cli.js:690:8098)\n    at Object.setItem (file:///C:/Users/Chris/AppData/Roaming/npm/node_modules/@anthropic-ai/claude-code/cli.js:64:18795)\n    at Object.H_Q [as _setObjectInStorage] (file:///C:/Users/Chris/AppData/Roaming/npm/node_modules/@anthropic-ai/claude-code/cli.js:64:19102)\n    at wxQ (file:///C:/Users/Chris/AppData/Roaming/npm/node_modules/@anthropic-ai/claude-code/cli.js:64:43604)\n    at UxQ (file:///C:/Users/Chris/AppData/Roaming/npm/node_modules/@anthropic-ai/claude-code/cli.js:64:43061)\n    at Object.get (file:///C:/Users/Chris/AppData/Roaming/npm/node_modules/@anthropic-ai/claude-code/cli.js:64:42666)\n    at Object.get (file:///C:/Users/Chris/AppData/Roaming/npm/node_modules/@anthropic-ai/claude-code/cli.js:64:42562)\n    at vxQ (file:///C:/Users/Chris/AppData/Roaming/npm/node_modules/@anthropic-ai/claude-code/cli.js:64:50400)\n    at Po0._getInternalRequestArgs (file:///C:/Users/Chris/AppData/Roaming/npm/node_modules/@anthropic-ai/claude-code/cli.js:64:50173)","timestamp":"2025-08-26T02:19:38.864Z"},{"error":"Error: EPERM: operation not permitted, open 'C:\\Users\\Chris\\.claude\\statsig\\statsig.session_id.2656274335'\n    at writeFileSync (node:fs:2425:20)\n    at up1.setItem (file:///C:/Users/Chris/AppData/Roaming/npm/node_modules/@anthropic-ai/claude-code/cli.js:690:8098)\n    at Object.setItem (file:///C:/Users/Chris/AppData/Roaming/npm/node_modules/@anthropic-ai/claude-code/cli.js:64:18795)\n    at Object.H_Q [as _setObjectInStorage] (file:///C:/Users/Chris/AppData/Roaming/npm/node_modules/@anthropic-ai/claude-code/cli.js:64:19102)\n    at wxQ (file:///C:/Users/Chris/AppData/Roaming/npm/node_modules/@anthropic-ai/claude-code/cli.js:64:43604)\n    at UxQ (file:///C:/Users/Chris/AppData/Roaming/npm/node_modules/@anthropic-ai/claude-code/cli.js:64:43061)\n    at Object.get (file:///C:/Users/Chris/AppData/Roaming/npm/node_modules/@anthropic-ai/claude-code/cli.js:64:42666)\n    at Object.get (file:///C:/Users/Chris/AppData/Roaming/npm/node_modules/@anthropi

Note: Error logs were truncated.

View original on GitHub ↗

This issue has 5 comments on GitHub. Read the full discussion on GitHub ↗