What’s Vulnerable › Products

anthropics claude-code vulnerabilities

28 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 27 published in the last 12 months.

Check whether your anthropics claude-code version is affected

Latest anthropics claude-code vulnerabilities

• CVE-2026-86063 — Claude Code: Plugin Hash Pin Bypass Allows Bypass of Hash Pinning (CVSS 7.5)
• CVE-2026-55607 — Claude Code: Sandbox Escape via Git Worktree Path Confusion Allows Unsandboxed Code Execution (CVSS 8.8)
• CVE-2026-46406 — Claude Code: Insecure Temporary File in /copy Command Enables Response Disclosure and Symlink-Based File Write (CVSS 6.1)
• CVE-2026-54316 — Claude Code: Out-of-Band Data Exfiltration via Pre-Approved HuggingFace Domain in WebFetch (CVSS 9.1)
• CVE-2026-40068 — Claude Code arbitrary code execution via git worktree commondir trust dialog bypass (CVSS 8.8)
• CVE-2026-39861 — Claude Code: Sandbox Escape via Symlink Following Allows Arbitrary File Write Outside Workspace (CVSS 10.0)
• CVE-2026-35603 — Claude Code: Insecure System-Wide Configuration Loading Enables Local Privilege Escalation on Windows (CVSS 7.3)
• CVE-2026-33068 — Claude Code has a Workspace Trust Dialog Bypass via Repo-Controlled Settings File (CVSS 8.8)
• CVE-2026-25725 — Claude Code Has Sandbox Escape via Persistent Configuration Injection in settings.json (CVSS 10.0)
• CVE-2026-25724 — Claude Code Has Permission Deny Bypass Through Symbolic Links (CVSS 7.5)
• CVE-2026-25723 — Claude Code Vulnerable to Command Injection via Piped sed Command Bypasses File Write Restrictions (CVSS 6.5)
• CVE-2026-25722 — Claude Code Vulnerable to Command Injection via Directory Change Bypasses Write Protection (CVSS 9.1)
• CVE-2026-24887 — Claude Code has a Command Injection in find Command Bypasses User Approval Prompt (CVSS 8.8)
• CVE-2026-24053 — Cluade Code has a Path Restriction Bypass via ZSH Clobber which Allows Arbitrary File Writes (CVSS 6.5)
• CVE-2026-24052 — Claude Code has a Domain Validation Bypass which Allows Automatic Requests to Attacker-Controlled Domains (CVSS 7.4)
• CVE-2026-21852 — Claude Code Leaks Data via Malicious Environment Configuration Before Trust Confirmation (CVSS 7.5)
• CVE-2025-66032 — Claude Code Command Validation Bypass Allows Arbitrary Code Execution (CVSS 9.8)
• CVE-2025-64755 — @anthropic-ai/claude-code has Sed Command Validation Bypass that Allows Arbitrary File Writes (CVSS 9.8)
• CVE-2025-65099 — Claude Code vulnerable to command execution prior to startup trust dialog (CVSS 9.8)
• CVE-2025-59829 — Claude Code: Permission deny bypass is possible through symlink (CVSS 6.5)
• CVE-2025-59536 — Claude Code's startup trust dialog could lead to Command Execution attack (CVSS 8.8)
• CVE-2025-59828 — Claude Code Vulnerable to Arbitrary Code Execution via Plugin Autoloading with Specific Yarn Versions (CVSS 9.8)
• CVE-2025-59041 — Claude Code vulnerable to arbitrary code execution caused by maliciously configured git email (CVSS 9.8)
• CVE-2025-58764 — Claude Code rg command had Command Injection that allowed bypass of user approval prompt for command execution (CVSS 9.8)
• CVE-2025-55284 — Claude Code's Permissive Default Allowlist Enables Unauthorized File Read and Network Exfiltration in Claude Code (CVSS 7.5)