anthropics claude-code

• CVE-2026-88968 High 7.7 Claude Code: TOCTOU Race in Edit Tool Allows File Writes Outside the Workspace 0.3%
• CVE-2026-88066 High 7.5 Claude Desktop: Uncontrolled Search Path Enables Arbitrary Code Execution via Malicious Git Executable 0.3%
• CVE-2026-86063 High 7.5 Claude Code: Plugin Hash Pin Bypass Allows Bypass of Hash Pinning 0.2%
• CVE-2026-55607 High 7.7 Claude Code: Sandbox Escape via Git Worktree Path Confusion Allows Unsandboxed Code Execution 0.7%
• CVE-2026-46406 Medium 4.4 Claude Code: Insecure Temporary File in /copy Command Enables Response Disclosure and Symlink-Based File Write 0.2%
• CVE-2026-54316 Medium 6.0 Claude Code: Out-of-Band Data Exfiltration via Pre-Approved HuggingFace Domain in WebFetch 0.5%
• CVE-2026-44470 High 8.5 Claude Desktop: Local Privilege Escalation via Directory Junction in CoworkVMService 0.2%
• CVE-2026-44467 High 7.4 Claude Desktop: SSH Host Key Verification Bypass Allows Man-in-the-Middle Attack on Remote Sessions 0.1%
• CVE-2026-40068 High 7.7 Claude Code arbitrary code execution via git worktree commondir trust dialog bypass 0.3%
• CVE-2026-39861 High 7.7 Claude Code: Sandbox Escape via Symlink Following Allows Arbitrary File Write Outside Workspace 0.7%
• CVE-2026-35603 Medium 5.4 Claude Code: Insecure System-Wide Configuration Loading Enables Local Privilege Escalation on Windows 0.1%
• CVE-2026-33068 High 7.7 Claude Code has a Workspace Trust Dialog Bypass via Repo-Controlled Settings File 0.4%
• CVE-2026-25725 High 7.7 Claude Code Has Sandbox Escape via Persistent Configuration Injection in settings.json 0.5%
• CVE-2026-25724 Low 2.3 Claude Code Has Permission Deny Bypass Through Symbolic Links 0.5%
• CVE-2026-25723 High 7.7 Claude Code Vulnerable to Command Injection via Piped sed Command Bypasses File Write Restrictions 0.4%
• CVE-2026-25722 High 7.7 Claude Code Vulnerable to Command Injection via Directory Change Bypasses Write Protection 0.5%
• CVE-2026-24887 High 7.7 Claude Code has a Command Injection in find Command Bypasses User Approval Prompt 0.6%
• CVE-2026-24053 High 7.7 Cluade Code has a Path Restriction Bypass via ZSH Clobber which Allows Arbitrary File Writes 0.5%
• CVE-2026-24052 High 7.1 Claude Code has a Domain Validation Bypass which Allows Automatic Requests to Attacker-Controlled Domains 0.4%
• CVE-2026-21852 Medium 5.3 Claude Code Leaks Data via Malicious Environment Configuration Before Trust Confirmation 27.5%
• CVE-2025-66032 High 8.7 Claude Code Command Validation Bypass Allows Arbitrary Code Execution 0.7%
• CVE-2025-64755 High 8.7 @anthropic-ai/claude-code has Sed Command Validation Bypass that Allows Arbitrary File Writes 0.6%
• CVE-2025-65099 High 7.7 Claude Code vulnerable to command execution prior to startup trust dialog 0.5%
• CVE-2025-59829 Low 2.3 Claude Code: Permission deny bypass is possible through symlink 0.4%
• CVE-2025-59536 High 8.7 Claude Code's startup trust dialog could lead to Command Execution attack 24.9%
• CVE-2025-59828 High 7.7 Claude Code Vulnerable to Arbitrary Code Execution via Plugin Autoloading with Specific Yarn Versions 0.4%
• CVE-2025-59041 High 8.7 Claude Code vulnerable to arbitrary code execution caused by maliciously configured git email 0.5%
• CVE-2025-58764 High 8.7 Claude Code rg command had Command Injection that allowed bypass of user approval prompt for command execution 0.5%
• CVE-2025-55284 High 7.1 Claude Code's Permissive Default Allowlist Enables Unauthorized File Read and Network Exfiltration in Claude Code 0.6%
• CVE-2025-54794 High 7.7 Claude Code Research Preview has a Path Restriction Bypass which could allow unauthorized file access 1.5%
• CVE-2025-54795 High 8.7 Claude Code echo command allowed bypass of user approval prompt for command execution 1.1%
• CVE-2025-52882 High 8.8 Claude Code IDE extensions allow websocket connections from arbitrary origins 0.4%