Vulnerability · Published May 18, 2026 · Assigned by VulnCheck

CVE-2026-47091Claude HUD 0.0.12 Path Traversal via transcript_path

Low 3.3

In plain English

A low-severity path traversal in claude-hud from jarrodwatts. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.1% (higher than 2% of all known vulnerabilities).

Severity (CVSS 3.1)3.3Low

Exploit odds (30 days)0.1%top 97.7% of all CVEs

Exploited in the wildNo reportsCISA SSVC: none

Attack toolingNoneno public tooling known

Official description

Claude HUD through 0.0.12, patched in commit 234d9aa, contains a path traversal vulnerability that allows attackers to read arbitrary files by supplying an unvalidated transcript_path value via stdin JSON. Attackers can access any file readable by the process and the file metadata is written to a persistent cache file with insufficient permissions, creating a forensic record of accessed paths that survives process exit.

Affected products (as reported)

Vendor	Product	Versions
jarrodwatts	claude-hud	0 – through 0.0.12

Weakness: CWE-22 · Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N

References

https://github.com/jarrodwatts/claude-hud/issues/485 issue-tracking
https://github.com/jarrodwatts/claude-hud/pull/487 issue-tracking
https://github.com/jarrodwatts/claude-hud/commit/234d9aad919b51326a43bcf90b45ae35c23afc30 patch
https://www.vulncheck.com/advisories/claude-hud-path-traversal-via-transcript-path third-party-advisory