Skip to content
OpenAdvisories

Vendor

jarrodwatts

3 known vulnerabilities.

Products

claude-hud 3
All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Low 3.3
    CVE-2026-47091

    Claude HUD 0.0.12 Path Traversal via transcript_path

    Claude HUD through 0.0.12, patched in commit 234d9aa, contains a path traversal vulnerability that allows attackers to read arbitrary files by supplying an unvalidated transcript_path value via stdin JSON. Attackers can access any file readable by the process…

    jarrodwatts claude-hud