Vulnerabilities

TI-2026-84560 CVE-2026-88968

Claude Code Edit tool race allows writes outside the workspace

LOW 36

Claude Code is an agentic coding tool.

CVSS 4.0HIGH 7.7 Network No auth User interaction EPSS 0.00317 Published 2026-11-03 Partial fix · 2.1.251 CWE-367

TI-2026-84559 CVE-2026-88066

Uncontrolled search path in Claude Desktop enables code execution

LOW 32

Claude Desktop is Anthropic's desktop application for interacting with Claude.

CVSS 4.0HIGH 7.5 Network No auth User interaction EPSS 0.00253 Published 2026-11-03 Fixed in 1.8089.0 CWE-427

TI-2026-79288 CVE-2026-111497 · GHSA-9v8h-qqgm-4m35

Out-of-bounds write in Google Brotli decoder

CRITICAL 99KEV

A buffer overflow vulnerability in the Brotli decoder (c/dec/decode.c) in Google Brotli versions 1.0.3 through 1.2.0 on all platforms allows a remote unauthenticated attacker to corrupt adjacent decoder state memory, dis…

CVSS 4.0CRITICAL 9.2 Network No auth No interaction EPSS 0.82641 Published 2026-10-22 Partial fix · 1.0.10, 1.1.1 +2 CWE-252

TI-2026-75555 CVE-2026-96620 · GHSA-h4mw-j7qp-8mwm

Argument injection in Claude Agent SDK lets attackers run commands

MEDIUM 49

Claude Agent SDK is a Python SDK for Claude Code.

CVSS 4.0CRITICAL 9.2 Network No auth No interaction EPSS 0.00705 Published 2026-10-16 Fixed in 0.2.121 CWE-20

TI-2026-72849 CVE-2026-86063 · GHSA-pq7j-f95f-qfcv

Hash pin bypass in Claude Code plugin installation

LOW 34

Claude Code is an agentic coding tool.

CVSS 4.0HIGH 7.5 Network No auth User interaction EPSS 0.00196 Published 2026-10-13 Fixed in 2.1.179 CWE-494

TI-2026-69123 CVE-2026-103435

Claude Code Arbitrary File Write via TOCTOU Symlink Following

LOW 35

Claude Code validated that a target file path resided within the project working directory at permission-check time, but re-resolved the path at write time without repeating that validation.

CVSS 4.0HIGH 7.7 Network No auth User interaction EPSS 0.00251 Published 2026-10-07 Fixed in 2.1.129 CWE-22

TI-2026-65560 CVE-2026-103012

Claude Code selected an API key stored by Claude Code, for example from an earlier…

LOW 10

Claude Code selected an API key stored by Claude Code, for example from an earlier `/login` or written directly to its configuration, ahead of the user's valid Claude Enterprise or Team sign-in when fetching the organiza…

CVSS 4.0LOW 2.0 Local Low privileges No interaction EPSS 0.00105 Published 2026-09-30 Partial fix · 2.1.260 CWE-696

TI-2026-35251 CVE-2026-47751 · GHSA-8q5r-mmjf-575q

Claude Code Action: Malicious MCP Server Configuration in PRs Enables Remote Code Execution and Secret Exfiltration

LOW 33

Claude Code Action is a general-purpose GitHub action that runs Claude Code on GitHub pull requests and issues.

CVSS 4.0MEDIUM 5.3 Network Low privileges No interaction EPSS 0.00766 Published 2026-07-16 Fixed in 1.0.74 CWE-200

TI-2026-39977 CVE-2026-55407 · GHSA-f9qc-qg88-7pq5

Buffa: Memory Exhaustion Denial of Service in decode_unknown_field via Unbounded Allocation

LOW 29

Buffa is a pure-Rust Protocol Buffers implementation with first-class protobuf editions support.

CVSS 4.0MEDIUM 6.3 Network No auth No interaction EPSS 0.00755 Published 2026-07-16 Fixed in 0.8.0 CWE-400

TI-2026-39976 CVE-2026-55406 · GHSA-9pwq-gcrx-wghh

Buffa: Use-After-Free in OwnedView via Unsound 'static Lifetime Promotion in Deref

LOW 26

Buffa is a pure-Rust Protocol Buffers implementation with first-class protobuf editions support.

CVSS 4.0MEDIUM 5.9 Local No auth No interaction EPSS 0.00193 Published 2026-07-16 Fixed in 0.7.0 CWE-200

TI-2026-40140 CVE-2026-55607 · GHSA-7835-87q9-rgvv

Claude Code: Sandbox Escape via Git Worktree Path Confusion Allows Unsandboxed Code Execution

LOW 37

Claude Code is an agentic coding tool.

CVSS 4.0HIGH 7.7 Network No auth User interaction EPSS 0.00687 Published 2026-06-29 Partial fix · 2.1.163 CWE-22

TI-2026-34120 CVE-2026-46406 · GHSA-4vp2-6q8c-pvq2

Claude Code: Insecure Temporary File in /copy Command Enables Response Disclosure and Symlink-Based File Write

LOW 19

Claude Code is an agentic coding tool.

CVSS 4.0MEDIUM 4.4 Local Low privileges User interaction EPSS 0.00154 Published 2026-06-29 Partial fix · 2.1.128 CWE-200

TI-2026-06660 CVE-2026-7574 · GHSA-g2fx-c284-xq7h

Anthropic Claude Desktop Cowork VM Image Contents Not Validated Before Use

LOW 38

Anthropic Claude Desktop Cowork VM image handling (confirmed across v1.1348.0 through v1.2278.0, including v1.1348.0, v1.1617.0, and v1.2278.0) validates only file presence and a version marker string before booting root…

CVSS 3.1HIGH 8.7 Local Low privileges No interaction EPSS 0.00115 Published 2026-06-23 No fix listed CWE-353

TI-2026-39211 CVE-2026-54316 · GHSA-fg94-h982-f3mm

Claude Code: Out-of-Band Data Exfiltration via Pre-Approved HuggingFace Domain in WebFetch

LOW 27

Claude Code is an agentic coding tool.

CVSS 4.0MEDIUM 6.0 Network No auth User interaction EPSS 0.0052 Published 2026-06-23 Partial fix · 2.1.163 CWE-183

TI-2026-32409 CVE-2026-44470

Claude Desktop: Local Privilege Escalation via Directory Junction in CoworkVMService

LOW 38

The Claude Desktop app gives you Claude Code with a graphical interface built for running multiple sessions side by side.

CVSS 4.0HIGH 8.5 Local Low privileges No interaction EPSS 0.00156 Published 2026-05-13 Fixed in 1.3834.0 CWE-269

TI-2026-32406 CVE-2026-44467

Claude Desktop: SSH Host Key Verification Bypass Allows Man-in-the-Middle Attack on Remote Sessions

LOW 33

The Claude Desktop app gives you Claude Code with a graphical interface built for running multiple sessions side by side.

CVSS 4.0HIGH 7.4 Adjacent network No auth User interaction EPSS 0.00135 Published 2026-05-13 Fixed in 1.4304.0 CWE-297

TI-2026-28899 CVE-2026-40068 · GHSA-q5hj-mxqh-vv77

Claude Code arbitrary code execution via git worktree commondir trust dialog bypass

LOW 35

In versions 2.1.63 through 2.1.83 of Claude Code, the folder trust determination logic used the git worktree commondir file without validating its contents.

CVSS 4.0HIGH 7.7 Network No auth User interaction EPSS 0.00314 Published 2026-05-05 Fixed in 2.1.84 CWE-20

TI-2026-30203 CVE-2026-41686 · GHSA-p7fg-763f-g4gf

Claude SDK for TypeScript has Insecure Default File Permissions in Local Filesystem Memory Tool

LOW 21

Claude SDK for TypeScript provides access to the Claude API from server-side TypeScript or JavaScript applications.

CVSS 4.0MEDIUM 4.8 Local Low privileges No interaction EPSS 0.00119 Published 2026-05-04 Fixed in 0.91.1 CWE-732

TI-2026-28742 CVE-2026-39861 · GHSA-vp62-r36r-9xqp

Claude Code: Sandbox Escape via Symlink Following Allows Arbitrary File Write Outside Workspace

LOW 37

Claude Code is an agentic coding tool.

CVSS 4.0HIGH 7.7 Network No auth User interaction EPSS 0.00711 Published 2026-04-21 Fixed in 2.1.64 CWE-22

TI-2026-27706 CVE-2026-35603 · GHSA-5cwg-9f6j-9jvx

Claude Code: Insecure System-Wide Configuration Loading Enables Local Privilege Escalation on Windows

LOW 25

Claude Code is an agentic coding tool.

CVSS 4.0MEDIUM 5.4 Local Low privileges User interaction EPSS 0.00108 Published 2026-04-17 Fixed in 2.1.75 CWE-426

TI-2026-26716 CVE-2026-34451 · GHSA-5474-4w2j-mq4c

Claude SDK for TypeScript: Memory Tool Path Validation Allows Sandbox Escape to Sibling Directories

LOW 28

Claude SDK for TypeScript provides access to the Claude API from server-side TypeScript or JavaScript applications.

CVSS 4.0MEDIUM 6.3 Network No auth No interaction EPSS 0.00362 Published 2026-03-31 Fixed in 0.81.0 CWE-22

TI-2026-26715 CVE-2026-34450 · GHSA-q5f5-3gjm-7mfm

Claude SDK for Python: Insecure Default File Permissions in Local Filesystem Memory Tool

LOW 21

The Claude SDK for Python provides access to the Claude API from Python applications.

CVSS 4.0MEDIUM 4.8 Local Low privileges No interaction EPSS 0.00127 Published 2026-03-31 Fixed in 0.87.0 CWE-276

TI-2026-26717 CVE-2026-34452 · GHSA-w828-4qhx-vxx3

Claude SDK for Python: Memory Tool Path Validation Race Condition Allows Sandbox Escape

LOW 25

The Claude SDK for Python provides access to the Claude API from Python applications.

CVSS 4.0MEDIUM 5.8 Local Low privileges No interaction EPSS 0.00143 Published 2026-03-31 Fixed in 0.87.0 CWE-367

TI-2026-18129 CVE-2026-22561 · GHSA-3c2p-6j48-gmm4

Uncontrolled search path in anthropics Claude Desktop - Windows

LOW 21

Uncontrolled search path elements in Anthropic Claude for Windows installer (Claude Setup.exe) versions prior to 1.1.3363 allow local privilege escalation via DLL search-order hijacking.

CVSS 4.0MEDIUM 4.7 Local Low privileges User interaction EPSS 0.00184 Published 2026-03-31 Fixed in 1.1.3363 CWE-427

TI-2026-25510 CVE-2026-33068 · GHSA-mmgp-wc2j-qcv7

Claude Code has a Workspace Trust Dialog Bypass via Repo-Controlled Settings File

LOW 36

Claude Code is an agentic coding tool.

CVSS 4.0HIGH 7.7 Network No auth User interaction EPSS 0.00351 Published 2026-03-20 Fixed in 2.1.53 CWE-807

Vulnerabilities

Filters