Anthropics vulnerabilities
40 CVEs and advisories name Anthropics as an affected vendor, newest first. Follow it as a feed.
- CVE-2026-88968Claude Code: TOCTOU Race in Edit Tool Allows File Writes Outside the Workspace
- CVE-2026-88066Claude Desktop: Uncontrolled Search Path Enables Arbitrary Code Execution via Malicious Git Executable
- CVE-2026-96620Claude Agent SDK: Argument Injection via resume Option Allows Arbitrary Command Execution
- CVE-2026-86063Claude Code: Plugin Hash Pin Bypass Allows Bypass of Hash Pinning
- CVE-2026-47751Claude Code Action: Malicious MCP Server Configuration in PRs Enables Remote Code Execution and Secret Exfiltration
- CVE-2026-55407Buffa: Memory Exhaustion Denial of Service in decode_unknown_field via Unbounded Allocation
- CVE-2026-55406Buffa: Use-After-Free in OwnedView via Unsound 'static Lifetime Promotion in Deref
- CVE-2026-55607Claude Code: Sandbox Escape via Git Worktree Path Confusion Allows Unsandboxed Code Execution
- CVE-2026-46406Claude Code: Insecure Temporary File in /copy Command Enables Response Disclosure and Symlink-Based File Write
- CVE-2026-54316Claude Code: Out-of-Band Data Exfiltration via Pre-Approved HuggingFace Domain in WebFetch
- CVE-2026-44470Claude Desktop: Local Privilege Escalation via Directory Junction in CoworkVMService
- CVE-2026-44467Claude Desktop: SSH Host Key Verification Bypass Allows Man-in-the-Middle Attack on Remote Sessions
- CVE-2026-40068Claude Code arbitrary code execution via git worktree commondir trust dialog bypass
- CVE-2026-41686Claude SDK for TypeScript has Insecure Default File Permissions in Local Filesystem Memory Tool
- CVE-2026-39861Claude Code: Sandbox Escape via Symlink Following Allows Arbitrary File Write Outside Workspace
- CVE-2026-35603Claude Code: Insecure System-Wide Configuration Loading Enables Local Privilege Escalation on Windows
- CVE-2026-34451Claude SDK for TypeScript: Memory Tool Path Validation Allows Sandbox Escape to Sibling Directories
- CVE-2026-34450Claude SDK for Python: Insecure Default File Permissions in Local Filesystem Memory Tool
- CVE-2026-34452Claude SDK for Python: Memory Tool Path Validation Race Condition Allows Sandbox Escape
- CVE-2026-33068Claude Code has a Workspace Trust Dialog Bypass via Repo-Controlled Settings File
- CVE-2026-25725Claude Code Has Sandbox Escape via Persistent Configuration Injection in settings.json
- CVE-2026-25724Claude Code Has Permission Deny Bypass Through Symbolic Links
- CVE-2026-25723Claude Code Vulnerable to Command Injection via Piped sed Command Bypasses File Write Restrictions
- CVE-2026-25722Claude Code Vulnerable to Command Injection via Directory Change Bypasses Write Protection
- CVE-2026-24887Claude Code has a Command Injection in find Command Bypasses User Approval Prompt
- CVE-2026-24053Cluade Code has a Path Restriction Bypass via ZSH Clobber which Allows Arbitrary File Writes
- CVE-2026-24052Claude Code has a Domain Validation Bypass which Allows Automatic Requests to Attacker-Controlled Domains
- CVE-2026-21852Claude Code Leaks Data via Malicious Environment Configuration Before Trust Confirmation
- CVE-2025-66032Claude Code Command Validation Bypass Allows Arbitrary Code Execution
- CVE-2025-64755@anthropic-ai/claude-code has Sed Command Validation Bypass that Allows Arbitrary File Writes