Anthropics vulnerabilities
40 CVEs and advisories name Anthropics as an affected vendor, newest first. Follow it as a feed.
- CVE-2025-65099Claude Code vulnerable to command execution prior to startup trust dialog
- CVE-2025-59829Claude Code: Permission deny bypass is possible through symlink
- CVE-2025-59536Claude Code's startup trust dialog could lead to Command Execution attack
- CVE-2025-59828Claude Code Vulnerable to Arbitrary Code Execution via Plugin Autoloading with Specific Yarn Versions
- CVE-2025-59041Claude Code vulnerable to arbitrary code execution caused by maliciously configured git email
- CVE-2025-58764Claude Code rg command had Command Injection that allowed bypass of user approval prompt for command execution
- CVE-2025-55284Claude Code's Permissive Default Allowlist Enables Unauthorized File Read and Network Exfiltration in Claude Code
- CVE-2025-54794Claude Code Research Preview has a Path Restriction Bypass which could allow unauthorized file access
- CVE-2025-54795Claude Code echo command allowed bypass of user approval prompt for command execution
- CVE-2025-52882Claude Code IDE extensions allow websocket connections from arbitrary origins