Skip to content
OpenAdvisories

Product · anthropics

claude-code

32 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

7 results · Clear filters · Feed

  • Medium 6.0
    CVE-2026-54316 Public exploit

    Claude Code: Out-of-Band Data Exfiltration via Pre-Approved HuggingFace Domain in WebFetch

    Claude Code is an agentic coding tool. From 0.2.54 until 2.1.163, because the hostname huggingface.co was pre-approved as a bare hostname for the WebFetch tool, any path on that domain—including attacker-controlled model repositories—was auto-approved without…

    anthropics claude-code @anthropic-ai/claude-code npm
  • Medium 5.4
    CVE-2026-35603 Public exploit

    Claude Code: Insecure System-Wide Configuration Loading Enables Local Privilege Escalation on Windows

    Claude Code is an agentic coding tool. In versions prior to 2.1.75 on Windows, Claude Code loaded the system-wide default configuration from C:\ProgramData\ClaudeCode\managed-settings.json without validating directory ownership or access permissions. Because …

    anthropics claude-code @anthropic-ai/claude-code npm
  • Medium 5.3
    CVE-2026-21852 Public exploit EPSS 28%

    Claude Code Leaks Data via Malicious Environment Configuration Before Trust Confirmation

    Claude Code is an agentic coding tool. Prior to version 2.0.65, vulnerability in Claude Code's project-load flow allowed malicious repositories to exfiltrate data including Anthropic API keys before users confirmed trust. An attacker-controlled repository cou…

    anthropics claude-code @anthropic-ai/claude-code npm
  • High 7.7
    CVE-2025-65099 Public exploit

    Claude Code vulnerable to command execution prior to startup trust dialog

    Claude Code is an agentic coding tool. Prior to version 1.0.39, when running on a machine with Yarn 3.0 or above, Claude Code could have been tricked to execute code contained in a project via yarn plugins before the user accepted the startup trust dialog. Ex…

    anthropics claude-code @anthropic-ai/claude-code npm
  • High 8.7
    CVE-2025-59536 Public exploit EPSS 25%

    Claude Code's startup trust dialog could lead to Command Execution attack

    Claude Code is an agentic coding tool. Versions before 1.0.111 were vulnerable to Code Injection due to a bug in the startup trust dialog implementation. Claude Code could be tricked to execute code contained in a project before the user accepted the startup …

    anthropics claude-code @anthropic-ai/claude-code npm
  • High 7.7
    CVE-2025-54794 Public exploit

    Claude Code Research Preview has a Path Restriction Bypass which could allow unauthorized file access

    Claude Code is an agentic coding tool. In versions below 0.2.111, a path validation flaw using prefix matching instead of canonical path comparison, makes it possible to bypass directory restrictions and access files outside the CWD. Successful exploitation d…

    anthropics claude-code @anthropic-ai/claude-code npm
  • High 8.7
    CVE-2025-54795 Public exploit

    Claude Code echo command allowed bypass of user approval prompt for command execution

    Claude Code is an agentic coding tool. In versions below 1.0.20, an error in command parsing makes it possible to bypass the Claude Code confirmation prompt to trigger execution of an untrusted command. Reliably exploiting this requires the ability to add unt…

    anthropics claude-code @anthropic-ai/claude-code npm