[Bug] Critical Security Vulnerability in Claude Code
Resolved 💬 5 comments Opened Aug 26, 2025 by crsCR Closed Jan 4, 2026
Bug Description
Critical security issues!
Environment Info
- Platform: win32
- Terminal: null
- Version: 1.0.90
- Feedback ID: a94fd89f-d14f-49d3-8cf6-4b482fc78440
Errors
[{"error":"Error: EPERM: operation not permitted, open 'C:\\Users\\Chris\\.claude\\statsig\\statsig.session_id.2656274335'\n at writeFileSync (node:fs:2425:20)\n at up1.setItem (file:///C:/Users/Chris/AppData/Roaming/npm/node_modules/@anthropic-ai/claude-code/cli.js:690:8098)\n at Object.setItem (file:///C:/Users/Chris/AppData/Roaming/npm/node_modules/@anthropic-ai/claude-code/cli.js:64:18795)\n at Object.H_Q [as _setObjectInStorage] (file:///C:/Users/Chris/AppData/Roaming/npm/node_modules/@anthropic-ai/claude-code/cli.js:64:19102)\n at wxQ (file:///C:/Users/Chris/AppData/Roaming/npm/node_modules/@anthropic-ai/claude-code/cli.js:64:43604)\n at UxQ (file:///C:/Users/Chris/AppData/Roaming/npm/node_modules/@anthropic-ai/claude-code/cli.js:64:43061)\n at Object.get (file:///C:/Users/Chris/AppData/Roaming/npm/node_modules/@anthropic-ai/claude-code/cli.js:64:42666)\n at Object.get (file:///C:/Users/Chris/AppData/Roaming/npm/node_modules/@anthropic-ai/claude-code/cli.js:64:42562)\n at vxQ (file:///C:/Users/Chris/AppData/Roaming/npm/node_modules/@anthropic-ai/claude-code/cli.js:64:50400)\n at Po0._getInternalRequestArgs (file:///C:/Users/Chris/AppData/Roaming/npm/node_modules/@anthropic-ai/claude-code/cli.js:64:50173)","timestamp":"2025-08-26T02:19:38.855Z"},{"error":"Error: EPERM: operation not permitted, open 'C:\\Users\\Chris\\.claude\\statsig\\statsig.session_id.2656274335'\n at writeFileSync (node:fs:2425:20)\n at up1.setItem (file:///C:/Users/Chris/AppData/Roaming/npm/node_modules/@anthropic-ai/claude-code/cli.js:690:8098)\n at Object.setItem (file:///C:/Users/Chris/AppData/Roaming/npm/node_modules/@anthropic-ai/claude-code/cli.js:64:18795)\n at Object.H_Q [as _setObjectInStorage] (file:///C:/Users/Chris/AppData/Roaming/npm/node_modules/@anthropic-ai/claude-code/cli.js:64:19102)\n at wxQ (file:///C:/Users/Chris/AppData/Roaming/npm/node_modules/@anthropic-ai/claude-code/cli.js:64:43604)\n at UxQ (file:///C:/Users/Chris/AppData/Roaming/npm/node_modules/@anthropic-ai/claude-code/cli.js:64:43061)\n at Object.get (file:///C:/Users/Chris/AppData/Roaming/npm/node_modules/@anthropic-ai/claude-code/cli.js:64:42666)\n at Object.get (file:///C:/Users/Chris/AppData/Roaming/npm/node_modules/@anthropic-ai/claude-code/cli.js:64:42562)\n at Po0.<anonymous> (file:///C:/Users/Chris/AppData/Roaming/npm/node_modules/@anthropic-ai/claude-code/cli.js:64:48464)\n at Generator.next (<anonymous>)","timestamp":"2025-08-26T02:19:38.856Z"},{"error":"Error: EPERM: operation not permitted, open 'C:\\Users\\Chris\\.claude\\statsig\\statsig.session_id.2656274335'\n at writeFileSync (node:fs:2425:20)\n at up1.setItem (file:///C:/Users/Chris/AppData/Roaming/npm/node_modules/@anthropic-ai/claude-code/cli.js:690:8098)\n at Object.setItem (file:///C:/Users/Chris/AppData/Roaming/npm/node_modules/@anthropic-ai/claude-code/cli.js:64:18795)\n at Object.H_Q [as _setObjectInStorage] (file:///C:/Users/Chris/AppData/Roaming/npm/node_modules/@anthropic-ai/claude-code/cli.js:64:19102)\n at wxQ (file:///C:/Users/Chris/AppData/Roaming/npm/node_modules/@anthropic-ai/claude-code/cli.js:64:43604)\n at UxQ (file:///C:/Users/Chris/AppData/Roaming/npm/node_modules/@anthropic-ai/claude-code/cli.js:64:43061)\n at Object.get (file:///C:/Users/Chris/AppData/Roaming/npm/node_modules/@anthropic-ai/claude-code/cli.js:64:42666)\n at Object.get (file:///C:/Users/Chris/AppData/Roaming/npm/node_modules/@anthropic-ai/claude-code/cli.js:64:42562)\n at vxQ (file:///C:/Users/Chris/AppData/Roaming/npm/node_modules/@anthropic-ai/claude-code/cli.js:64:50400)\n at Po0._getInternalRequestArgs (file:///C:/Users/Chris/AppData/Roaming/npm/node_modules/@anthropic-ai/claude-code/cli.js:64:50173)","timestamp":"2025-08-26T02:19:38.864Z"},{"error":"Error: EPERM: operation not permitted, open 'C:\\Users\\Chris\\.claude\\statsig\\statsig.session_id.2656274335'\n at writeFileSync (node:fs:2425:20)\n at up1.setItem (file:///C:/Users/Chris/AppData/Roaming/npm/node_modules/@anthropic-ai/claude-code/cli.js:690:8098)\n at Object.setItem (file:///C:/Users/Chris/AppData/Roaming/npm/node_modules/@anthropic-ai/claude-code/cli.js:64:18795)\n at Object.H_Q [as _setObjectInStorage] (file:///C:/Users/Chris/AppData/Roaming/npm/node_modules/@anthropic-ai/claude-code/cli.js:64:19102)\n at wxQ (file:///C:/Users/Chris/AppData/Roaming/npm/node_modules/@anthropic-ai/claude-code/cli.js:64:43604)\n at UxQ (file:///C:/Users/Chris/AppData/Roaming/npm/node_modules/@anthropic-ai/claude-code/cli.js:64:43061)\n at Object.get (file:///C:/Users/Chris/AppData/Roaming/npm/node_modules/@anthropic-ai/claude-code/cli.js:64:42666)\n at Object.get (file:///C:/Users/Chris/AppData/Roaming/npm/node_modules/@anthropi
Note: Error logs were truncated.
This issue has 5 comments on GitHub. Read the full discussion on GitHub ↗