anthropics

11 results · Clear filters · Feed

• Medium 5.3
  CVE-2026-47751

  Claude Code Action: Malicious MCP Server Configuration in PRs Enables Remote Code Execution and Secret Exfiltration

  Claude Code Action is a general-purpose GitHub action that runs Claude Code on GitHub pull requests and issues. Prior to 1.0.74, because the action checked out attacker-controlled pull request head branches, read .mcp.json from the working directory via defau…

  anthropics claude-code-action anthropics/claude-code-action GitHub Actions
  Jul 16, 2026
• Medium 6.3
  CVE-2026-55407

  Buffa: Memory Exhaustion Denial of Service in decode_unknown_field via Unbounded Allocation

  Buffa is a pure-Rust Protocol Buffers implementation with first-class protobuf editions support. Prior to 0.8.0, the decode_unknown_field function in buffa's protobuf decoder allocated heap memory in proportion to untrusted input (unknown fields in the serial…

  anthropics buffa buffa crates.io
  Jul 16, 2026
• Medium 5.9
  CVE-2026-55406

  Buffa: Use-After-Free in OwnedView via Unsound 'static Lifetime Promotion in Deref

  Buffa is a pure-Rust Protocol Buffers implementation with first-class protobuf editions support. Prior to 0.7.0, a soundness bug in the OwnedView<V> type allowed safe Rust code to trigger a use-after-free: the OwnedView::decode constructor transmuted a borrow…

  anthropics buffa buffa crates.io
  Jul 16, 2026
• Medium 4.4
  CVE-2026-46406

  Claude Code: Insecure Temporary File in /copy Command Enables Response Disclosure and Symlink-Based File Write

  Claude Code is an agentic coding tool. From 2.1.59 until 2.1.128, the Claude Code /copy command wrote responses to a hardcoded, predictable path (/tmp/claude/response.md) without UID isolation, randomness, or symlink protection. The file was created world-rea…

  anthropics claude-code @anthropic-ai/claude-code npm
  Jun 29, 2026
• Medium 6.0
  CVE-2026-54316 Public exploit

  Claude Code: Out-of-Band Data Exfiltration via Pre-Approved HuggingFace Domain in WebFetch

  Claude Code is an agentic coding tool. From 0.2.54 until 2.1.163, because the hostname huggingface.co was pre-approved as a bare hostname for the WebFetch tool, any path on that domain—including attacker-controlled model repositories—was auto-approved without…

  anthropics claude-code @anthropic-ai/claude-code npm
  Jun 23, 2026
• Medium 4.8
  CVE-2026-41686

  Claude SDK for TypeScript has Insecure Default File Permissions in Local Filesystem Memory Tool

  Claude SDK for TypeScript provides access to the Claude API from server-side TypeScript or JavaScript applications. From version 0.79.0 to before version 0.91.1, the BetaLocalFilesystemMemoryTool in the Anthropic TypeScript SDK created memory files and direct…

  anthropics anthropic-sdk-typescript @anthropic-ai/sdk npm
  May 4, 2026
• Medium 5.4
  CVE-2026-35603 Public exploit

  Claude Code: Insecure System-Wide Configuration Loading Enables Local Privilege Escalation on Windows

  Claude Code is an agentic coding tool. In versions prior to 2.1.75 on Windows, Claude Code loaded the system-wide default configuration from C:\ProgramData\ClaudeCode\managed-settings.json without validating directory ownership or access permissions. Because …

  anthropics claude-code @anthropic-ai/claude-code npm
  Apr 17, 2026
• Medium 6.3
  CVE-2026-34451

  Claude SDK for TypeScript: Memory Tool Path Validation Allows Sandbox Escape to Sibling Directories

  Claude SDK for TypeScript provides access to the Claude API from server-side TypeScript or JavaScript applications. From version 0.79.0 to before version 0.81.0, the local filesystem memory tool in the Anthropic TypeScript SDK validated model-supplied paths u…

  anthropics anthropic-sdk-typescript @anthropic-ai/sdk npm
  Mar 31, 2026
• Medium 4.8
  CVE-2026-34450

  Claude SDK for Python: Insecure Default File Permissions in Local Filesystem Memory Tool

  The Claude SDK for Python provides access to the Claude API from Python applications. From version 0.86.0 to before version 0.87.0, the local filesystem memory tool in the Anthropic Python SDK created memory files with mode 0o666, leaving them world-readable …

  anthropics anthropic-sdk-python open-webui anthropic Wolfi PyPI
  Mar 31, 2026
• Medium 5.8
  CVE-2026-34452

  Claude SDK for Python: Memory Tool Path Validation Race Condition Allows Sandbox Escape

  The Claude SDK for Python provides access to the Claude API from Python applications. From version 0.86.0 to before version 0.87.0, the async local filesystem memory tool in the Anthropic Python SDK validated that model-supplied paths resolved inside the sand…

  anthropics anthropic-sdk-python open-webui anthropic Wolfi PyPI
  Mar 31, 2026
• Medium 5.3
  CVE-2026-21852 Public exploit EPSS 28%

  Claude Code Leaks Data via Malicious Environment Configuration Before Trust Confirmation

  Claude Code is an agentic coding tool. Prior to version 2.0.65, vulnerability in Claude Code's project-load flow allowed malicious repositories to exfiltrate data including Anthropic API keys before users confirmed trust. An attacker-controlled repository cou…

  anthropics claude-code @anthropic-ai/claude-code npm
  Jan 21, 2026