# cve.now: Anthropics

The newest entries naming Anthropics as an affected vendor (up to 200), of 40 in all, 0 known exploited. Older ones are in the full catalog at https://cve.now/latest.md.

- [CVE-2026-88968](https://cve.now/CVE-2026-88968.md): Claude Code: TOCTOU Race in Edit Tool Allows File Writes Outside the Workspace (CVSS 7.7)
- [CVE-2026-88066](https://cve.now/CVE-2026-88066.md): Claude Desktop: Uncontrolled Search Path Enables Arbitrary Code Execution via Malicious Git Executable (CVSS 7.5)
- [CVE-2026-96620](https://cve.now/CVE-2026-96620.md): Claude Agent SDK: Argument Injection via resume Option Allows Arbitrary Command Execution (CVSS 9.2)
- [CVE-2026-86063](https://cve.now/CVE-2026-86063.md): Claude Code: Plugin Hash Pin Bypass Allows Bypass of Hash Pinning (CVSS 7.5)
- [CVE-2026-47751](https://cve.now/CVE-2026-47751.md): Claude Code Action: Malicious MCP Server Configuration in PRs Enables Remote Code Execution and Secret Exfiltration (CVSS 5.3)
- [CVE-2026-55407](https://cve.now/CVE-2026-55407.md): Buffa: Memory Exhaustion Denial of Service in decode\_unknown\_field via Unbounded Allocation (CVSS 6.3)
- [CVE-2026-55406](https://cve.now/CVE-2026-55406.md): Buffa: Use-After-Free in OwnedView via Unsound 'static Lifetime Promotion in Deref (CVSS 5.9)
- [CVE-2026-55607](https://cve.now/CVE-2026-55607.md): Claude Code: Sandbox Escape via Git Worktree Path Confusion Allows Unsandboxed Code Execution (CVSS 7.7)
- [CVE-2026-46406](https://cve.now/CVE-2026-46406.md): Claude Code: Insecure Temporary File in /copy Command Enables Response Disclosure and Symlink-Based File Write (CVSS 4.4)
- [CVE-2026-54316](https://cve.now/CVE-2026-54316.md): Claude Code: Out-of-Band Data Exfiltration via Pre-Approved HuggingFace Domain in WebFetch (CVSS 6.0)
- [CVE-2026-44470](https://cve.now/CVE-2026-44470.md): Claude Desktop: Local Privilege Escalation via Directory Junction in CoworkVMService (CVSS 8.5)
- [CVE-2026-44467](https://cve.now/CVE-2026-44467.md): Claude Desktop: SSH Host Key Verification Bypass Allows Man-in-the-Middle Attack on Remote Sessions (CVSS 7.4)
- [CVE-2026-40068](https://cve.now/CVE-2026-40068.md): Claude Code arbitrary code execution via git worktree commondir trust dialog bypass (CVSS 7.7)
- [CVE-2026-41686](https://cve.now/CVE-2026-41686.md): Claude SDK for TypeScript has Insecure Default File Permissions in Local Filesystem Memory Tool (CVSS 4.8)
- [CVE-2026-39861](https://cve.now/CVE-2026-39861.md): Claude Code: Sandbox Escape via Symlink Following Allows Arbitrary File Write Outside Workspace (CVSS 7.7)
- [CVE-2026-35603](https://cve.now/CVE-2026-35603.md): Claude Code: Insecure System-Wide Configuration Loading Enables Local Privilege Escalation on Windows (CVSS 5.4)
- [CVE-2026-34451](https://cve.now/CVE-2026-34451.md): Claude SDK for TypeScript: Memory Tool Path Validation Allows Sandbox Escape to Sibling Directories (CVSS 6.3)
- [CVE-2026-34450](https://cve.now/CVE-2026-34450.md): Claude SDK for Python: Insecure Default File Permissions in Local Filesystem Memory Tool (CVSS 4.8)
- [CVE-2026-34452](https://cve.now/CVE-2026-34452.md): Claude SDK for Python: Memory Tool Path Validation Race Condition Allows Sandbox Escape (CVSS 5.8)
- [CVE-2026-33068](https://cve.now/CVE-2026-33068.md): Claude Code has a Workspace Trust Dialog Bypass via Repo-Controlled Settings File (CVSS 7.7)
- [CVE-2026-25725](https://cve.now/CVE-2026-25725.md): Claude Code Has Sandbox Escape via Persistent Configuration Injection in settings.json (CVSS 7.7)
- [CVE-2026-25724](https://cve.now/CVE-2026-25724.md): Claude Code Has Permission Deny Bypass Through Symbolic Links (CVSS 2.3)
- [CVE-2026-25723](https://cve.now/CVE-2026-25723.md): Claude Code Vulnerable to Command Injection via Piped sed Command Bypasses File Write Restrictions (CVSS 7.7)
- [CVE-2026-25722](https://cve.now/CVE-2026-25722.md): Claude Code Vulnerable to Command Injection via Directory Change Bypasses Write Protection (CVSS 7.7)
- [CVE-2026-24887](https://cve.now/CVE-2026-24887.md): Claude Code has a Command Injection in find Command Bypasses User Approval Prompt (CVSS 7.7)
- [CVE-2026-24053](https://cve.now/CVE-2026-24053.md): Cluade Code has a Path Restriction Bypass via ZSH Clobber which Allows Arbitrary File Writes (CVSS 7.7)
- [CVE-2026-24052](https://cve.now/CVE-2026-24052.md): Claude Code has a Domain Validation Bypass which Allows Automatic Requests to Attacker-Controlled Domains (CVSS 7.1)
- [CVE-2026-21852](https://cve.now/CVE-2026-21852.md): Claude Code Leaks Data via Malicious Environment Configuration Before Trust Confirmation (CVSS 5.3)
- [CVE-2025-66032](https://cve.now/CVE-2025-66032.md): Claude Code Command Validation Bypass Allows Arbitrary Code Execution (CVSS 8.7)
- [CVE-2025-64755](https://cve.now/CVE-2025-64755.md): @anthropic-ai/claude-code has Sed Command Validation Bypass that Allows Arbitrary File Writes (CVSS 8.7)
- [CVE-2025-65099](https://cve.now/CVE-2025-65099.md): Claude Code vulnerable to command execution prior to startup trust dialog (CVSS 7.7)
- [CVE-2025-59829](https://cve.now/CVE-2025-59829.md): Claude Code: Permission deny bypass is possible through symlink (CVSS 2.3)
- [CVE-2025-59536](https://cve.now/CVE-2025-59536.md): Claude Code's startup trust dialog could lead to Command Execution attack (CVSS 8.7)
- [CVE-2025-59828](https://cve.now/CVE-2025-59828.md): Claude Code Vulnerable to Arbitrary Code Execution via Plugin Autoloading with Specific Yarn Versions (CVSS 7.7)
- [CVE-2025-59041](https://cve.now/CVE-2025-59041.md): Claude Code vulnerable to arbitrary code execution caused by maliciously configured git email (CVSS 8.7)
- [CVE-2025-58764](https://cve.now/CVE-2025-58764.md): Claude Code rg command had Command Injection that allowed bypass of user approval prompt for command execution (CVSS 8.7)
- [CVE-2025-55284](https://cve.now/CVE-2025-55284.md): Claude Code's Permissive Default Allowlist Enables Unauthorized File Read and Network Exfiltration in Claude Code (CVSS 7.1)
- [CVE-2025-54794](https://cve.now/CVE-2025-54794.md): Claude Code Research Preview has a Path Restriction Bypass which could allow unauthorized file access (CVSS 7.7)
- [CVE-2025-54795](https://cve.now/CVE-2025-54795.md): Claude Code echo command allowed bypass of user approval prompt for command execution (CVSS 8.7)
- [CVE-2025-52882](https://cve.now/CVE-2025-52882.md): Claude Code IDE extensions allow websocket connections from arbitrary origins (CVSS 8.8)

---

Source: cve.now
Built by [Sazabi](https://www.sazabi.com/?utm_source=cve-now&utm_medium=markdown), AI-native observability and security: automatic issue detection, plain-language log search and live dashboards.
Page: https://cve.now/vendors/anthropics
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.