anthropics

Records47All Threatist records

Exploited (KEV)1In CISA KEV

CVSS critical3CVSS 9.0–10.0

CVSS high29CVSS 7.0–8.9

Exploited now

anthropics records in CISA KEV

TI-2026-79288 Google Brotli Unchecked Return Value Vulnerability CRITICAL 99KEV 2026-10-27

Components

Products in the NVD configurations · select one to filter the records

Claude Code 26 records HIGH Claude Desktop 2 records LOW Claude Sdk For Python 2 records LOW Claude Sdk For Typescript 2 records LOW Bun 1 record CRITICAL Claude 1 record LOW

Records

47 records

TI-2026-79288 CVE-2026-111497 · GHSA-9v8h-qqgm-4m35

Out-of-bounds write in Google Brotli decoder

CRITICAL 99KEV

A buffer overflow vulnerability in the Brotli decoder (c/dec/decode.c) in Google Brotli versions 1.0.3 through 1.2.0 on all platforms allows a remote unauthenticated attacker to corrupt adjacent decoder state memory, dis…

CVSS 4.0CRITICAL 9.2 Network No auth No interaction EPSS 0.82641 Published 2026-10-22 Partial fix · 1.0.10, 1.1.1 +2 CWE-252

TI-2026-00421 CVE-2026-0621 · GHSA-8r9q-7v3j-jr4g

MCP TypeScript SDK UriTemplate Exploded Array Pattern ReDoS

HIGH 77

Anthropic's MCP TypeScript SDK versions up to and including 1.25.1 contain a regular expression denial of service (ReDoS) vulnerability in the UriTemplate class when processing RFC 6570 exploded array patterns.

CVSS 4.0HIGH 8.7 Network No auth No interaction EPSS 0.00438 Published 2026-01-05 Fixed in 1.25.2 CWE-1333

TI-2025-40558 CVE-2025-66032 · GHSA-xq4m-mc3c-vvg3

Claude Code Command Validation Bypass Allows Arbitrary Code Execution

HIGH 73

Claude Code is an agentic coding tool.

CVSS 4.0HIGH 8.7 Network No auth User interaction EPSS 0.00738 Published 2025-12-03 Fixed in 1.0.93 CWE-77

TI-2025-36683 CVE-2025-59041 · GHSA-j4h9-wv2m-wrf7

Claude Code vulnerable to arbitrary code execution caused by maliciously configured git email

HIGH 73

Claude Code is an agentic coding tool.

CVSS 4.0HIGH 8.7 Network No auth User interaction EPSS 0.00545 Published 2025-09-10 Fixed in 1.0.105 CWE-94

TI-2025-24240 CVE-2025-34072 · GHSA-gmx5-crwh-6vxg

Anthropic Slack MCP Server Data Exfiltration via Link Unfurling

HIGH 73

A data exfiltration vulnerability exists in Anthropic’s deprecated Slack Model Context Protocol (MCP) Server via automatic link unfurling.

CVSS 4.0CRITICAL 9.3 Network No auth No interaction EPSS 0.0043 Published 2025-07-02 No fix listed CWE-20

TI-2025-32918 CVE-2025-52882 · GHSA-9f65-56v6-gxw7

Claude Code IDE extensions allow websocket connections from arbitrary origins

HIGH 71

Claude Code is an agentic coding tool.

CVSS 4.0HIGH 8.8 Network No auth User interaction EPSS 0.00357 Published 2025-06-24 Fixed in 1.0.24 CWE-1385

TI-2025-37066 CVE-2025-59536 · GHSA-4fgq-fpq9-mr3g

Claude Code's startup trust dialog could lead to Command Execution attack

MEDIUM 61

Claude Code is an agentic coding tool.

CVSS 4.0HIGH 8.7 Network No auth User interaction EPSS 0.24887 Published 2025-10-03 Fixed in 1.0.111 CWE-94

TI-2026-17554 CVE-2026-21852 · GHSA-jh7p-qr78-84p7

Claude Code Leaks Data via Malicious Environment Configuration Before Trust Confirmation

MEDIUM 52

Claude Code is an agentic coding tool.

CVSS 4.0MEDIUM 5.3 Network No auth User interaction EPSS 0.27504 Published 2026-01-21 Fixed in 2.0.65 CWE-522

TI-2026-75555 CVE-2026-96620 · GHSA-h4mw-j7qp-8mwm

Argument injection in Claude Agent SDK lets attackers run commands

MEDIUM 49

Claude Agent SDK is a Python SDK for Claude Code.

CVSS 4.0CRITICAL 9.2 Network No auth No interaction EPSS 0.00705 Published 2026-10-16 Fixed in 0.2.121 CWE-20

TI-2025-40093 CVE-2025-64755 · GHSA-7mv8-j34q-vp7q

@anthropic-ai/claude-code has Sed Command Validation Bypass that Allows Arbitrary File Writes

MEDIUM 47

Claude Code is an agentic coding tool.

CVSS 4.0HIGH 8.7 Network No auth User interaction EPSS 0.0062 Published 2025-11-21 Fixed in 2.0.31 CWE-78

TI-2025-36422 CVE-2025-58764 · GHSA-qxfv-fcpc-w36x

Claude Code rg command had Command Injection that allowed bypass of user approval prompt for command execution

MEDIUM 46

Claude Code is an agentic coding tool.

CVSS 4.0HIGH 8.7 Network No auth User interaction EPSS 0.00549 Published 2025-09-10 Fixed in 1.0.105 CWE-94

TI-2025-34550 CVE-2025-54795 · GHSA-x56v-x2h6-7j34

Claude Code echo command allowed bypass of user approval prompt for command execution

MEDIUM 42

Claude Code is an agentic coding tool.

CVSS 4.0HIGH 8.7 Network No auth User interaction EPSS 0.01092 Published 2025-08-05 Fixed in 1.0.20 CWE-78

TI-2025-34549 CVE-2025-54794 · GHSA-pmw4-pwvc-3hx2

Claude Code Research Preview has a Path Restriction Bypass which could allow unauthorized file access

LOW 39

Claude Code is an agentic coding tool.

CVSS 4.0HIGH 7.7 Network No auth User interaction EPSS 0.01451 Published 2025-08-05 Fixed in 0.2.111 CWE-22

TI-2026-32409 CVE-2026-44470

Claude Desktop: Local Privilege Escalation via Directory Junction in CoworkVMService

LOW 38

The Claude Desktop app gives you Claude Code with a graphical interface built for running multiple sessions side by side.

CVSS 4.0HIGH 8.5 Local Low privileges No interaction EPSS 0.00156 Published 2026-05-13 Fixed in 1.3834.0 CWE-269

TI-2026-06660 CVE-2026-7574 · GHSA-g2fx-c284-xq7h

Anthropic Claude Desktop Cowork VM Image Contents Not Validated Before Use

LOW 38

Anthropic Claude Desktop Cowork VM image handling (confirmed across v1.1348.0 through v1.2278.0, including v1.1348.0, v1.1617.0, and v1.2278.0) validates only file presence and a version marker string before booting root…

CVSS 3.1HIGH 8.7 Local Low privileges No interaction EPSS 0.00115 Published 2026-06-23 No fix listed CWE-353

TI-2026-40140 CVE-2026-55607 · GHSA-7835-87q9-rgvv

Claude Code: Sandbox Escape via Git Worktree Path Confusion Allows Unsandboxed Code Execution

LOW 37

Claude Code is an agentic coding tool.

CVSS 4.0HIGH 7.7 Network No auth User interaction EPSS 0.00687 Published 2026-06-29 Partial fix · 2.1.163 CWE-22

TI-2026-28742 CVE-2026-39861 · GHSA-vp62-r36r-9xqp

Claude Code: Sandbox Escape via Symlink Following Allows Arbitrary File Write Outside Workspace

LOW 37

Claude Code is an agentic coding tool.

CVSS 4.0HIGH 7.7 Network No auth User interaction EPSS 0.00711 Published 2026-04-21 Fixed in 2.1.64 CWE-22

TI-2026-20072 CVE-2026-24887 · GHSA-qgqw-h4xq-7w8w

Claude Code has a Command Injection in find Command Bypasses User Approval Prompt

LOW 37

Claude Code is an agentic coding tool.

CVSS 4.0HIGH 7.7 Network No auth User interaction EPSS 0.00642 Published 2026-02-03 Fixed in 2.0.72 CWE-78

TI-2026-84560 CVE-2026-88968

Claude Code Edit tool race allows writes outside the workspace

LOW 36

Claude Code is an agentic coding tool.

CVSS 4.0HIGH 7.7 Network No auth User interaction EPSS 0.00317 Published 2026-11-03 Partial fix · 2.1.251 CWE-367

TI-2026-25510 CVE-2026-33068 · GHSA-mmgp-wc2j-qcv7

Claude Code has a Workspace Trust Dialog Bypass via Repo-Controlled Settings File

LOW 36

Claude Code is an agentic coding tool.

CVSS 4.0HIGH 7.7 Network No auth User interaction EPSS 0.00351 Published 2026-03-20 Fixed in 2.1.53 CWE-807

TI-2026-20794 CVE-2026-25725 · GHSA-ff64-7w26-62rf

Claude Code Has Sandbox Escape via Persistent Configuration Injection in settings.json

LOW 36

Claude Code is an agentic coding tool.

CVSS 4.0HIGH 7.7 Network No auth User interaction EPSS 0.00529 Published 2026-02-06 Fixed in 2.1.2 CWE-501

TI-2026-20792 CVE-2026-25723 · GHSA-mhg7-666j-cqg4

Claude Code Vulnerable to Command Injection via Piped sed Command Bypasses File Write Restrictions

LOW 36

Claude Code is an agentic coding tool.

CVSS 4.0HIGH 7.7 Network No auth User interaction EPSS 0.00385 Published 2026-02-06 Fixed in 2.0.55 CWE-20

TI-2026-20791 CVE-2026-25722 · GHSA-66q4-vfjg-2qhh

Claude Code Vulnerable to Command Injection via Directory Change Bypasses Write Protection

LOW 36

Claude Code is an agentic coding tool.

CVSS 4.0HIGH 7.7 Network No auth User interaction EPSS 0.00509 Published 2026-02-06 Fixed in 2.0.57 CWE-20

TI-2026-19381 CVE-2026-24053 · GHSA-q728-gf8j-w49r

Cluade Code has a Path Restriction Bypass via ZSH Clobber which Allows Arbitrary File Writes

LOW 36

Claude Code is an agentic coding tool.

CVSS 4.0HIGH 7.7 Network No auth User interaction EPSS 0.00514 Published 2026-02-03 Fixed in 2.0.74 CWE-22

TI-2025-40252 CVE-2025-65099 · GHSA-5hhx-v7f6-x7gv

Claude Code vulnerable to command execution prior to startup trust dialog

LOW 36

Claude Code is an agentic coding tool.

CVSS 4.0HIGH 7.7 Network No auth User interaction EPSS 0.00545 Published 2025-11-19 Fixed in 1.0.39 CWE-94

Open these records in search →

Critical	3
High	29
Medium	12
Low	3
No CVSS	0