Anthropics Claude-code vulnerabilities

• anthropics claude-code Claude Code: TOCTOU Race in Edit Tool Allows File Writes Outside the Workspace CVE-2026-88968 7.7 HighNovember 3, 2026
• anthropics claude-code Claude Desktop: Uncontrolled Search Path Enables Arbitrary Code Execution via Malicious Git Executable CVE-2026-88066 7.5 HighNovember 3, 2026
• anthropics claude-code Claude Code: Plugin Hash Pin Bypass Allows Bypass of Hash Pinning CVE-2026-86063 Fix available 7.5 HighOctober 13, 2026
• anthropic claude code, anthropics claude-code +1 more Claude Code: Sandbox Escape via Git Worktree Path Confusion Allows Unsandboxed Code Execution CVE-2026-55607 Fix available 7.7 HighJune 29, 2026
• anthropic claude code, anthropics claude-code +1 more Claude Code: Insecure Temporary File in /copy Command Enables Response Disclosure and Symlink-Based File Write CVE-2026-46406 Fix available 4.4 MediumJune 25, 2026
• anthropic claude code, anthropics claude-code +1 more Claude Code: Out-of-Band Data Exfiltration via Pre-Approved HuggingFace Domain in WebFetch CVE-2026-54316 Public exploitFix available 6.0 MediumJune 17, 2026
• anthropics claude-code-action Claude Code Action: Malicious MCP Server Configuration in PRs Enables Remote Code Execution and Secret Exfiltration CVE-2026-47751 Fix available 5.3 MediumJune 10, 2026
• anthropic claude desktop, anthropics claude-code +1 more Claude Desktop: Local Privilege Escalation via Directory Junction in CoworkVMService CVE-2026-44470 8.5 HighMay 13, 2026
• anthropic claude desktop, anthropics claude-code +1 more Claude Desktop: SSH Host Key Verification Bypass Allows Man-in-the-Middle Attack on Remote Sessions CVE-2026-44467 7.4 HighMay 13, 2026
• anthropic claude code, anthropics claude-code +1 more Claude Code arbitrary code execution via git worktree commondir trust dialog bypass CVE-2026-40068 Fix available 7.7 HighApril 24, 2026
• anthropic claude code, anthropics claude-code +1 more Claude Code: Sandbox Escape via Symlink Following Allows Arbitrary File Write Outside Workspace CVE-2026-39861 Fix available 7.7 HighApril 21, 2026
• anthropic claude code, anthropics claude-code +1 more Claude Code: Insecure System-Wide Configuration Loading Enables Local Privilege Escalation on Windows CVE-2026-35603 Public exploitFix available 5.4 MediumApril 17, 2026
• anthropic claude code, anthropics claude-code +1 more Claude Code has a Workspace Trust Dialog Bypass via Repo-Controlled Settings File CVE-2026-33068 Fix available 7.7 HighMarch 19, 2026
• anthropic claude code, anthropics claude-code +1 more Claude Code Has Sandbox Escape via Persistent Configuration Injection in settings.json CVE-2026-25725 Fix available 7.7 HighFebruary 6, 2026
• anthropic claude code, anthropics claude-code +1 more Claude Code Has Permission Deny Bypass Through Symbolic Links CVE-2026-25724 Fix available 2.3 LowFebruary 6, 2026
• anthropic claude code, anthropics claude-code +1 more Claude Code Vulnerable to Command Injection via Piped sed Command Bypasses File Write Restrictions CVE-2026-25723 Fix available 7.7 HighFebruary 6, 2026
• anthropic claude code, anthropics claude-code +1 more Claude Code Vulnerable to Command Injection via Directory Change Bypasses Write Protection CVE-2026-25722 Fix available 7.7 HighFebruary 6, 2026
• anthropic claude code, anthropics claude-code +1 more Claude Code has a Command Injection in find Command Bypasses User Approval Prompt CVE-2026-24887 Fix available 7.7 HighFebruary 3, 2026
• anthropic claude code, anthropics claude-code +1 more Cluade Code has a Path Restriction Bypass via ZSH Clobber which Allows Arbitrary File Writes CVE-2026-24053 Fix available 7.7 HighFebruary 3, 2026
• anthropic claude code, anthropics claude-code +1 more Claude Code has a Domain Validation Bypass which Allows Automatic Requests to Attacker-Controlled Domains CVE-2026-24052 Fix available 7.1 HighFebruary 3, 2026
• anthropic claude code, anthropics claude-code +1 more Claude Code Leaks Data via Malicious Environment Configuration Before Trust Confirmation CVE-2026-21852 Public exploitFix available EPSS 27.5% 5.3 MediumJanuary 21, 2026
• anthropic claude code, anthropics claude-code +1 more Claude Code Command Validation Bypass Allows Arbitrary Code Execution CVE-2025-66032 Fix available 8.7 HighDecember 3, 2025
• anthropic claude code, anthropics claude-code +1 more @anthropic-ai/claude-code has Sed Command Validation Bypass that Allows Arbitrary File Writes CVE-2025-64755 Fix available 8.7 HighNovember 20, 2025
• anthropic claude code, anthropics claude-code +1 more Claude Code vulnerable to command execution prior to startup trust dialog CVE-2025-65099 Public exploitFix available 7.7 HighNovember 19, 2025
• anthropic claude code, anthropics claude-code +1 more Claude Code: Permission deny bypass is possible through symlink CVE-2025-59829 Fix available 2.3 LowOctober 3, 2025
• anthropic claude code, anthropics claude-code +1 more Claude Code's startup trust dialog could lead to Command Execution attack CVE-2025-59536 Public exploitFix available EPSS 24.9% 8.7 HighOctober 3, 2025
• anthropic claude code, anthropics claude-code +1 more Claude Code Vulnerable to Arbitrary Code Execution via Plugin Autoloading with Specific Yarn Versions CVE-2025-59828 Fix available 7.7 HighSeptember 24, 2025
• anthropic claude code, anthropics claude-code +1 more Claude Code vulnerable to arbitrary code execution caused by maliciously configured git email CVE-2025-59041 Fix available 8.7 HighSeptember 10, 2025
• anthropic claude code, anthropics claude-code +1 more Claude Code rg command had Command Injection that allowed bypass of user approval prompt for command execution CVE-2025-58764 Fix available 8.7 HighSeptember 10, 2025
• anthropic claude code, anthropics claude-code +1 more Claude Code's Permissive Default Allowlist Enables Unauthorized File Read and Network Exfiltration in Claude Code CVE-2025-55284 Fix available 7.1 HighAugust 16, 2025
• anthropic claude code, anthropics claude-code +1 more Claude Code echo command allowed bypass of user approval prompt for command execution CVE-2025-54795 Public exploitFix available 8.7 HighAugust 4, 2025
• anthropic claude code, anthropics claude-code +1 more Claude Code Research Preview has a Path Restriction Bypass which could allow unauthorized file access CVE-2025-54794 Public exploitFix available 7.7 HighAugust 4, 2025
• anthropics claude-code Claude Code IDE extensions allow websocket connections from arbitrary origins CVE-2025-52882 Fix available 8.8 HighJune 23, 2025