CVE-2025-54794: Claude Code Research Preview has a Path Restriction Bypass which could allow unauthorized file access

The vulnerability is a path traversal issue in the @anthropic-ai/claude-code package, as described in GHSA-pmw4-pwvc-3hx2. The flaw lies in the use of prefix-based path validation instead of canonical path comparison, which can be bypassed to access files outside the current working directory. I was unable to identify the specific vulnerable functions because I could not locate the commit that patches this vulnerability. The security advisory does not provide a direct link to the commit, and my attempts to find it by inspecting repository tags were unsuccessful as the repository appears to have no tags. Without the diff from the fixing commit, I cannot determine which functions were modified and are therefore implicated in the vulnerability.