Vulnerabilities

TI-2026-40140 CVE-2026-55607 · GHSA-7835-87q9-rgvv

Claude Code: Sandbox Escape via Git Worktree Path Confusion Allows Unsandboxed Code Execution

LOW 37

Claude Code is an agentic coding tool.

CVSS 4.0HIGH 7.7 Network No auth User interaction EPSS 0.00687 Published 2026-06-29 Partial fix · 2.1.163 CWE-22

TI-2026-34120 CVE-2026-46406 · GHSA-4vp2-6q8c-pvq2

Claude Code: Insecure Temporary File in /copy Command Enables Response Disclosure and Symlink-Based File Write

LOW 19

Claude Code is an agentic coding tool.

CVSS 4.0MEDIUM 4.4 Local Low privileges User interaction EPSS 0.00154 Published 2026-06-29 Partial fix · 2.1.128 CWE-200

TI-2026-39211 CVE-2026-54316 · GHSA-fg94-h982-f3mm

Claude Code: Out-of-Band Data Exfiltration via Pre-Approved HuggingFace Domain in WebFetch

LOW 27

Claude Code is an agentic coding tool.

CVSS 4.0MEDIUM 6.0 Network No auth User interaction EPSS 0.0052 Published 2026-06-23 Partial fix · 2.1.163 CWE-183

TI-2026-28899 CVE-2026-40068 · GHSA-q5hj-mxqh-vv77

Claude Code arbitrary code execution via git worktree commondir trust dialog bypass

LOW 35

In versions 2.1.63 through 2.1.83 of Claude Code, the folder trust determination logic used the git worktree commondir file without validating its contents.

CVSS 4.0HIGH 7.7 Network No auth User interaction EPSS 0.00314 Published 2026-05-05 Fixed in 2.1.84 CWE-20

TI-2026-28742 CVE-2026-39861 · GHSA-vp62-r36r-9xqp

Claude Code: Sandbox Escape via Symlink Following Allows Arbitrary File Write Outside Workspace

LOW 37

Claude Code is an agentic coding tool.

CVSS 4.0HIGH 7.7 Network No auth User interaction EPSS 0.00711 Published 2026-04-21 Fixed in 2.1.64 CWE-22

TI-2026-27706 CVE-2026-35603 · GHSA-5cwg-9f6j-9jvx

Claude Code: Insecure System-Wide Configuration Loading Enables Local Privilege Escalation on Windows

LOW 25

Claude Code is an agentic coding tool.

CVSS 4.0MEDIUM 5.4 Local Low privileges User interaction EPSS 0.00108 Published 2026-04-17 Fixed in 2.1.75 CWE-426

TI-2026-25510 CVE-2026-33068 · GHSA-mmgp-wc2j-qcv7

Claude Code has a Workspace Trust Dialog Bypass via Repo-Controlled Settings File

LOW 36

Claude Code is an agentic coding tool.

CVSS 4.0HIGH 7.7 Network No auth User interaction EPSS 0.00351 Published 2026-03-20 Fixed in 2.1.53 CWE-807

TI-2026-20794 CVE-2026-25725 · GHSA-ff64-7w26-62rf

Claude Code Has Sandbox Escape via Persistent Configuration Injection in settings.json

LOW 36

Claude Code is an agentic coding tool.

CVSS 4.0HIGH 7.7 Network No auth User interaction EPSS 0.00529 Published 2026-02-06 Fixed in 2.1.2 CWE-501

TI-2026-20793 CVE-2026-25724 · GHSA-4q92-rfm6-2cqx

Claude Code Has Permission Deny Bypass Through Symbolic Links

LOW 13

Claude Code is an agentic coding tool.

CVSS 4.0LOW 2.3 Network No auth User interaction EPSS 0.00475 Published 2026-02-06 Fixed in 2.1.7 CWE-285

TI-2026-20792 CVE-2026-25723 · GHSA-mhg7-666j-cqg4

Claude Code Vulnerable to Command Injection via Piped sed Command Bypasses File Write Restrictions

LOW 36

Claude Code is an agentic coding tool.

CVSS 4.0HIGH 7.7 Network No auth User interaction EPSS 0.00385 Published 2026-02-06 Fixed in 2.0.55 CWE-20

TI-2026-20791 CVE-2026-25722 · GHSA-66q4-vfjg-2qhh

Claude Code Vulnerable to Command Injection via Directory Change Bypasses Write Protection

LOW 36

Claude Code is an agentic coding tool.

CVSS 4.0HIGH 7.7 Network No auth User interaction EPSS 0.00509 Published 2026-02-06 Fixed in 2.0.57 CWE-20

TI-2026-20072 CVE-2026-24887 · GHSA-qgqw-h4xq-7w8w

Claude Code has a Command Injection in find Command Bypasses User Approval Prompt

LOW 37

Claude Code is an agentic coding tool.

CVSS 4.0HIGH 7.7 Network No auth User interaction EPSS 0.00642 Published 2026-02-03 Fixed in 2.0.72 CWE-78

TI-2026-19381 CVE-2026-24053 · GHSA-q728-gf8j-w49r

Cluade Code has a Path Restriction Bypass via ZSH Clobber which Allows Arbitrary File Writes

LOW 36

Claude Code is an agentic coding tool.

CVSS 4.0HIGH 7.7 Network No auth User interaction EPSS 0.00514 Published 2026-02-03 Fixed in 2.0.74 CWE-22

TI-2026-19380 CVE-2026-24052 · GHSA-vhw5-3g5m-8ggf

Claude Code has a Domain Validation Bypass which Allows Automatic Requests to Attacker-Controlled Domains

LOW 32

Claude Code is an agentic coding tool.

CVSS 4.0HIGH 7.1 Network No auth User interaction EPSS 0.00432 Published 2026-02-03 Fixed in 1.0.111 CWE-601

TI-2026-17554 CVE-2026-21852 · GHSA-jh7p-qr78-84p7

Claude Code Leaks Data via Malicious Environment Configuration Before Trust Confirmation

MEDIUM 52

Claude Code is an agentic coding tool.

CVSS 4.0MEDIUM 5.3 Network No auth User interaction EPSS 0.27504 Published 2026-01-21 Fixed in 2.0.65 CWE-522

TI-2025-40558 CVE-2025-66032 · GHSA-xq4m-mc3c-vvg3

Claude Code Command Validation Bypass Allows Arbitrary Code Execution

HIGH 73

Claude Code is an agentic coding tool.

CVSS 4.0HIGH 8.7 Network No auth User interaction EPSS 0.00738 Published 2025-12-03 Fixed in 1.0.93 CWE-77

TI-2025-40093 CVE-2025-64755 · GHSA-7mv8-j34q-vp7q

@anthropic-ai/claude-code has Sed Command Validation Bypass that Allows Arbitrary File Writes

MEDIUM 47

Claude Code is an agentic coding tool.

CVSS 4.0HIGH 8.7 Network No auth User interaction EPSS 0.0062 Published 2025-11-21 Fixed in 2.0.31 CWE-78

TI-2025-40252 CVE-2025-65099 · GHSA-5hhx-v7f6-x7gv

Claude Code vulnerable to command execution prior to startup trust dialog

LOW 36

Claude Code is an agentic coding tool.

CVSS 4.0HIGH 7.7 Network No auth User interaction EPSS 0.00545 Published 2025-11-19 Fixed in 1.0.39 CWE-94

TI-2025-37268 CVE-2025-59829 · GHSA-66m2-gx93-v996

Claude Code: Permission deny bypass is possible through symlink

LOW 12

Claude Code is an agentic coding tool.

CVSS 4.0LOW 2.3 Network No auth User interaction EPSS 0.00447 Published 2025-10-03 Fixed in 1.0.120 CWE-61

TI-2025-37066 CVE-2025-59536 · GHSA-4fgq-fpq9-mr3g

Claude Code's startup trust dialog could lead to Command Execution attack

MEDIUM 61

Claude Code is an agentic coding tool.

CVSS 4.0HIGH 8.7 Network No auth User interaction EPSS 0.24887 Published 2025-10-03 Fixed in 1.0.111 CWE-94

TI-2025-37267 CVE-2025-59828 · GHSA-2jjv-qf24-vfm4

Claude Code Vulnerable to Arbitrary Code Execution via Plugin Autoloading with Specific Yarn Versions

LOW 36

Claude Code is an agentic coding tool.

CVSS 4.0HIGH 7.7 Network No auth User interaction EPSS 0.00363 Published 2025-09-24 Fixed in 1.0.39 CWE-829

TI-2025-36683 CVE-2025-59041 · GHSA-j4h9-wv2m-wrf7

Claude Code vulnerable to arbitrary code execution caused by maliciously configured git email

HIGH 73

Claude Code is an agentic coding tool.

CVSS 4.0HIGH 8.7 Network No auth User interaction EPSS 0.00545 Published 2025-09-10 Fixed in 1.0.105 CWE-94

TI-2025-36422 CVE-2025-58764 · GHSA-qxfv-fcpc-w36x

Claude Code rg command had Command Injection that allowed bypass of user approval prompt for command execution

MEDIUM 46

Claude Code is an agentic coding tool.

CVSS 4.0HIGH 8.7 Network No auth User interaction EPSS 0.00549 Published 2025-09-10 Fixed in 1.0.105 CWE-94

TI-2025-34941 CVE-2025-55284 · GHSA-x5gv-jw7f-j6xj

Claude Code's Permissive Default Allowlist Enables Unauthorized File Read and Network Exfiltration in Claude Code

LOW 32

Claude Code is an agentic coding tool.

CVSS 4.0HIGH 7.1 Network No auth User interaction EPSS 0.00609 Published 2025-08-16 Fixed in 1.0.4 CWE-78

TI-2025-34549 CVE-2025-54794 · GHSA-pmw4-pwvc-3hx2

Claude Code Research Preview has a Path Restriction Bypass which could allow unauthorized file access

LOW 39

Claude Code is an agentic coding tool.

CVSS 4.0HIGH 7.7 Network No auth User interaction EPSS 0.01451 Published 2025-08-05 Fixed in 0.2.111 CWE-22

Vulnerabilities

Filters