TI-2026-84559 Aliases CVE-2026-88066

Uncontrolled search path in Claude Desktop enables code execution

LOW 32CWE-427Published 2026-11-03 · Updated 2026-11-03

Key facts

Attack vector: Network
Privileges required: None
User interaction: Active
Attack complexity: Low
Attack requirements: Present
Impact type: Code execution
Confidentiality · integrity · availability: High · High · High
Fix status: Fixed

Attack profile from CVSS 4.0 · CNA. Fix status from CNA. Impact type from CWE-427.

Summary

Claude Desktop on Windows before 1.8089.0 starts git.exe without an absolute path, so Windows can load a malicious git.exe from the opened project's working directory (CWE-427). A user who opens an attacker-controlled or shared repository can have the substituted program run with their privileges.

Written with Claude Haiku 5.5 from the sources below · 2026-11-03

Description from the CNA

Claude Desktop is Anthropic's desktop application for interacting with Claude. Prior to 1.8089.0, Claude Desktop on Windows invokes git.exe through uv_spawn without an absolute path, allowing Windows search-path resolution to select a malicious git.exe placed in the opened project's current working directory before the intended system executable. Opening an attacker-controlled or shared repository can therefore execute the substituted program with the user's privileges. This issue is fixed in version 1.8089.0.

Why it matters now

EPSS 0.00253 16th percentileScored 2026-11-07

Fix Fixed claude-code (anthropics): 1.8089.0

SSVC decision points

Not available: CISA has not published SSVC decision points for this record.

Affected products

Vendor	Product	Affected versions	Fixed in	Status	Source
anthropics	claude-code	before 1.8089.0	1.8089.0	Patch available	CNA

claude-code Vendoranthropics Affected before 1.8089.0 Fixed in 1.8089.0 Patch available CNA

CPE names Threatist (inferred) · 1

Inferred from how NVD named this product before; not given by a source.

CPE	Versions	Role	Vendor
cpe:2.3:a:anthropic:claude_code::::::::	—	—	anthropics

cpe:2.3:a:anthropic:claude_code:*:*:*:*:*:*:*:* Versions — — ·anthropics

Remediation

Update Claude Desktop to version 1.8089.0, which fixes this issue.

Written with Claude Haiku 5.5 from the sources below · 2026-11-03

Fix · CNA claude-code (anthropics) Fixed in 1.8089.0

Timeline

2026-11-03 Threatist record created from CVE-2026-88066
2026-11-05 Priority changed: MEDIUM → LOW

References

Other 1

https://github.com/anthropics/claude-code/security/advisories/GHSA-4p2j-qj3c-6x84

TI-2026-79288 Out-of-bounds write in Google Brotli decoder KEVCVSS 4.0CRITICAL 9.2
TI-2026-00421 MCP TypeScript SDK UriTemplate Exploded Array Pattern ReDoS CVSS 4.0HIGH 8.7
TI-2025-40558 Claude Code Command Validation Bypass Allows Arbitrary Code Execution CVSS 4.0HIGH 8.7
TI-2025-36683 Claude Code vulnerable to arbitrary code execution caused by maliciously configured git email CVSS 4.0HIGH 8.7
TI-2025-24240 Anthropic Slack MCP Server Data Exfiltration via Link Unfurling CVSS 4.0CRITICAL 9.3
TI-2025-32918 Claude Code IDE extensions allow websocket connections from arbitrary origins CVSS 4.0HIGH 8.8

See all 46 →

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences