Skip to content
OpenAdvisories

Product · Anthropic

@anthropic-ai/claude-code

2 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • High 7.7
    CVE-2026-103435

    Arbitrary File Write via Write-Time Symlink Following (TOCTOU) in Claude Code

    Claude Code validated that a target file path resided within the project working directory at permission-check time, but re-resolved the path at write time without repeating that validation. This time-of-check to time-of-use (TOCTOU) gap allowed an attacker w…

    Anthropic @anthropic-ai/claude-code