@anthropic-ai/claude-code versions prior to 2.0.31 contain a vulnerability in sed command parsing that allows bypassing read-only validation, enabling arbitrary file writes on the host system. This flaw is fixed in version 2.0.31. Users who rely on the standard auto-update mechanism have already received the fix, while manual updaters should upgrade to the latest version.