Aanthropics

Products

Exploited and recent CVEs

• CVE-2026-88968 High 7.7 Claude Code: TOCTOU Race in Edit Tool Allows File Writes Outside the Workspace 0.3%
• CVE-2026-88066 High 7.5 Claude Desktop: Uncontrolled Search Path Enables Arbitrary Code Execution via Malicious Git Executable 0.3%
• CVE-2026-96620 Critical 9.2 Claude Agent SDK: Argument Injection via resume Option Allows Arbitrary Command Execution 0.7%
• CVE-2026-86063 High 7.5 Claude Code: Plugin Hash Pin Bypass Allows Bypass of Hash Pinning 0.2%
• CVE-2026-47751 Medium 5.3 Claude Code Action: Malicious MCP Server Configuration in PRs Enables Remote Code Execution and Secret Exfiltration 0.8%
• CVE-2026-55407 Medium 6.3 Buffa: Memory Exhaustion Denial of Service in decode_unknown_field via Unbounded Allocation 0.8%
• CVE-2026-55406 Medium 5.9 Buffa: Use-After-Free in OwnedView via Unsound 'static Lifetime Promotion in Deref 0.2%
• CVE-2026-55607 High 7.7 Claude Code: Sandbox Escape via Git Worktree Path Confusion Allows Unsandboxed Code Execution 0.7%
• CVE-2026-46406 Medium 4.4 Claude Code: Insecure Temporary File in /copy Command Enables Response Disclosure and Symlink-Based File Write 0.2%
• CVE-2026-54316 Medium 6.0 Claude Code: Out-of-Band Data Exfiltration via Pre-Approved HuggingFace Domain in WebFetch 0.5%
• CVE-2026-44470 High 8.5 Claude Desktop: Local Privilege Escalation via Directory Junction in CoworkVMService 0.2%
• CVE-2026-44467 High 7.4 Claude Desktop: SSH Host Key Verification Bypass Allows Man-in-the-Middle Attack on Remote Sessions 0.1%
• CVE-2026-40068 High 7.7 Claude Code arbitrary code execution via git worktree commondir trust dialog bypass 0.3%
• CVE-2026-41686 Medium 4.8 Claude SDK for TypeScript has Insecure Default File Permissions in Local Filesystem Memory Tool 0.1%
• CVE-2026-39861 High 7.7 Claude Code: Sandbox Escape via Symlink Following Allows Arbitrary File Write Outside Workspace 0.7%
• CVE-2026-35603 Medium 5.4 Claude Code: Insecure System-Wide Configuration Loading Enables Local Privilege Escalation on Windows 0.1%
• CVE-2026-34451 Medium 6.3 Claude SDK for TypeScript: Memory Tool Path Validation Allows Sandbox Escape to Sibling Directories 0.4%
• CVE-2026-34450 Medium 4.8 Claude SDK for Python: Insecure Default File Permissions in Local Filesystem Memory Tool 0.1%
• CVE-2026-34452 Medium 5.8 Claude SDK for Python: Memory Tool Path Validation Race Condition Allows Sandbox Escape 0.1%
• CVE-2026-33068 High 7.7 Claude Code has a Workspace Trust Dialog Bypass via Repo-Controlled Settings File 0.4%
• CVE-2026-25725 High 7.7 Claude Code Has Sandbox Escape via Persistent Configuration Injection in settings.json 0.5%
• CVE-2026-25724 Low 2.3 Claude Code Has Permission Deny Bypass Through Symbolic Links 0.5%
• CVE-2026-25723 High 7.7 Claude Code Vulnerable to Command Injection via Piped sed Command Bypasses File Write Restrictions 0.4%
• CVE-2026-25722 High 7.7 Claude Code Vulnerable to Command Injection via Directory Change Bypasses Write Protection 0.5%
• CVE-2026-24887 High 7.7 Claude Code has a Command Injection in find Command Bypasses User Approval Prompt 0.6%
• CVE-2026-24053 High 7.7 Cluade Code has a Path Restriction Bypass via ZSH Clobber which Allows Arbitrary File Writes 0.5%
• CVE-2026-24052 High 7.1 Claude Code has a Domain Validation Bypass which Allows Automatic Requests to Attacker-Controlled Domains 0.4%
• CVE-2026-21852 Medium 5.3 Claude Code Leaks Data via Malicious Environment Configuration Before Trust Confirmation 27.5%
• CVE-2025-66032 High 8.7 Claude Code Command Validation Bypass Allows Arbitrary Code Execution 0.7%
• CVE-2025-64755 High 8.7 @anthropic-ai/claude-code has Sed Command Validation Bypass that Allows Arbitrary File Writes 0.6%