Anthropic Claude vulnerabilities

• anthropic @anthropic-ai/claude-code Arbitrary File Write via Write-Time Symlink Following (TOCTOU) in Claude Code CVE-2026-103435 7.7 HighOctober 7, 2026
• anthropic @anthropic-ai/claude-code Claude Code selected an API key stored by Claude Code, for example from an earlier /login or written directly to its configuration, ahead of the user's valid Claude Enterprise or Team sign-in when fet… CVE-2026-103012 2.0 LowSeptember 30, 2026
• anthropic claude code, anthropics claude-code +1 more Claude Code: Sandbox Escape via Git Worktree Path Confusion Allows Unsandboxed Code Execution CVE-2026-55607 Fix available 7.7 HighJune 29, 2026
• anthropic claude code, anthropics claude-code +1 more Claude Code: Insecure Temporary File in /copy Command Enables Response Disclosure and Symlink-Based File Write CVE-2026-46406 Fix available 4.4 MediumJune 25, 2026
• anthropic claude desktop cowork Anthropic Claude Desktop Cowork VM Image Contents Not Validated Before Use CVE-2026-7574 Public exploit 8.7 HighJune 23, 2026
• anthropic claude code, anthropics claude-code +1 more Claude Code: Out-of-Band Data Exfiltration via Pre-Approved HuggingFace Domain in WebFetch CVE-2026-54316 Public exploitFix available 6.0 MediumJune 17, 2026
• anthropic claude desktop, anthropics claude-code +1 more Claude Desktop: Local Privilege Escalation via Directory Junction in CoworkVMService CVE-2026-44470 8.5 HighMay 13, 2026
• anthropic claude desktop, anthropics claude-code +1 more Claude Desktop: SSH Host Key Verification Bypass Allows Man-in-the-Middle Attack on Remote Sessions CVE-2026-44467 7.4 HighMay 13, 2026
• anthropic claude sdk for typescript, anthropics anthropic-sdk-typescript +1 more Claude SDK for TypeScript has Insecure Default File Permissions in Local Filesystem Memory Tool CVE-2026-41686 Fix available 4.8 MediumApril 29, 2026
• anthropic claude code, anthropics claude-code +1 more Claude Code arbitrary code execution via git worktree commondir trust dialog bypass CVE-2026-40068 Fix available 7.7 HighApril 24, 2026
• anthropic claude code, anthropics claude-code +1 more Claude Code: Sandbox Escape via Symlink Following Allows Arbitrary File Write Outside Workspace CVE-2026-39861 Fix available 7.7 HighApril 21, 2026
• anthropic claude code, anthropics claude-code +1 more Claude Code: Insecure System-Wide Configuration Loading Enables Local Privilege Escalation on Windows CVE-2026-35603 Public exploitFix available 5.4 MediumApril 17, 2026
• anthropic claude sdk for typescript, anthropics anthropic-sdk-typescript +1 more Claude SDK for TypeScript: Memory Tool Path Validation Allows Sandbox Escape to Sibling Directories CVE-2026-34451 Fix available 6.3 MediumMarch 31, 2026
• anthropic claude sdk for python, anthropics anthropic-sdk-python +1 more Claude SDK for Python: Insecure Default File Permissions in Local Filesystem Memory Tool CVE-2026-34450 Fix available 4.8 MediumMarch 31, 2026
• anthropic claude sdk for python, anthropics anthropic-sdk-python +1 more Claude SDK for Python: Memory Tool Path Validation Race Condition Allows Sandbox Escape CVE-2026-34452 Fix available 5.8 MediumMarch 31, 2026
• anthropic claude, claude desktop - windows +1 more Uncontrolled search path elements in Anthropic Claude for Windows installer (Claude Setup.exe)... CVE-2026-22561 4.7 MediumMarch 31, 2026
• anthropic claude code, anthropics claude-code +1 more Claude Code has a Workspace Trust Dialog Bypass via Repo-Controlled Settings File CVE-2026-33068 Fix available 7.7 HighMarch 19, 2026
• anthropic claude code, anthropics claude-code +1 more Claude Code Has Sandbox Escape via Persistent Configuration Injection in settings.json CVE-2026-25725 Fix available 7.7 HighFebruary 6, 2026
• anthropic claude code, anthropics claude-code +1 more Claude Code Has Permission Deny Bypass Through Symbolic Links CVE-2026-25724 Fix available 2.3 LowFebruary 6, 2026
• anthropic claude code, anthropics claude-code +1 more Claude Code Vulnerable to Command Injection via Piped sed Command Bypasses File Write Restrictions CVE-2026-25723 Fix available 7.7 HighFebruary 6, 2026
• anthropic claude code, anthropics claude-code +1 more Claude Code Vulnerable to Command Injection via Directory Change Bypasses Write Protection CVE-2026-25722 Fix available 7.7 HighFebruary 6, 2026
• anthropic claude code, anthropics claude-code +1 more Claude Code has a Command Injection in find Command Bypasses User Approval Prompt CVE-2026-24887 Fix available 7.7 HighFebruary 3, 2026
• anthropic claude code, anthropics claude-code +1 more Cluade Code has a Path Restriction Bypass via ZSH Clobber which Allows Arbitrary File Writes CVE-2026-24053 Fix available 7.7 HighFebruary 3, 2026
• anthropic claude code, anthropics claude-code +1 more Claude Code has a Domain Validation Bypass which Allows Automatic Requests to Attacker-Controlled Domains CVE-2026-24052 Fix available 7.1 HighFebruary 3, 2026
• anthropic claude code, anthropics claude-code +1 more Claude Code Leaks Data via Malicious Environment Configuration Before Trust Confirmation CVE-2026-21852 Public exploitFix available EPSS 27.5% 5.3 MediumJanuary 21, 2026
• anthropic claude code, anthropics claude-code +1 more Claude Code Command Validation Bypass Allows Arbitrary Code Execution CVE-2025-66032 Fix available 8.7 HighDecember 3, 2025
• anthropic claude code, anthropics claude-code +1 more @anthropic-ai/claude-code has Sed Command Validation Bypass that Allows Arbitrary File Writes CVE-2025-64755 Fix available 8.7 HighNovember 20, 2025
• anthropic claude code, anthropics claude-code +1 more Claude Code vulnerable to command execution prior to startup trust dialog CVE-2025-65099 Public exploitFix available 7.7 HighNovember 19, 2025
• anthropic claude code, anthropics claude-code +1 more Claude Code: Permission deny bypass is possible through symlink CVE-2025-59829 Fix available 2.3 LowOctober 3, 2025
• anthropic claude code, anthropics claude-code +1 more Claude Code's startup trust dialog could lead to Command Execution attack CVE-2025-59536 Public exploitFix available EPSS 24.9% 8.7 HighOctober 3, 2025
• anthropic claude code, anthropics claude-code +1 more Claude Code Vulnerable to Arbitrary Code Execution via Plugin Autoloading with Specific Yarn Versions CVE-2025-59828 Fix available 7.7 HighSeptember 24, 2025
• anthropic claude code, anthropics claude-code +1 more Claude Code vulnerable to arbitrary code execution caused by maliciously configured git email CVE-2025-59041 Fix available 8.7 HighSeptember 10, 2025
• anthropic claude code, anthropics claude-code +1 more Claude Code rg command had Command Injection that allowed bypass of user approval prompt for command execution CVE-2025-58764 Fix available 8.7 HighSeptember 10, 2025
• anthropic claude code, anthropics claude-code +1 more Claude Code's Permissive Default Allowlist Enables Unauthorized File Read and Network Exfiltration in Claude Code CVE-2025-55284 Fix available 7.1 HighAugust 16, 2025
• anthropic claude code, anthropics claude-code +1 more Claude Code echo command allowed bypass of user approval prompt for command execution CVE-2025-54795 Public exploitFix available 8.7 HighAugust 4, 2025
• anthropic claude code, anthropics claude-code +1 more Claude Code Research Preview has a Path Restriction Bypass which could allow unauthorized file access CVE-2025-54794 Public exploitFix available 7.7 HighAugust 4, 2025