Anthropic - vulnerabilities (CVEs)

38 CVEs in 11 products, 3 in the last 30 days, newest from 2026-10-22.

Products

Newest CVEs of Anthropic

CVE-2026-111497 - CVSS 9.8 (critical), 2026-10-22: A buffer overflow vulnerability in the Brotli decoder (c/dec/decode.c) in Google Brotli versions 1.0.3 through 1.2.0 on all platforms allows a remote…
CVE-2026-103435 - CVSS 7.7 (high), 2026-10-07: Claude Code validated that a target file path resided within the project working directory at permission-check time, but re-resolved the path at write time…
CVE-2026-103012 - CVSS 2 (low), 2026-09-30: Claude Code selected an API key stored by Claude Code, for example from an earlier `/login` or written directly to its configuration, ahead of the user's…
CVE-2026-55607 - CVSS 8.8 (high), 2026-06-29: Claude Code is an agentic coding tool. From 2.1.38 until 2.1.163, Claude Code's worktree handling allowed creation of worktrees named ".git" and navigation to…
CVE-2026-46406 - CVSS 6.1 (medium), 2026-06-29: Claude Code is an agentic coding tool. From 2.1.59 until 2.1.128, the Claude Code /copy command wrote responses to a hardcoded, predictable path…
CVE-2026-7574 - CVSS 8.7 (high), 2026-06-23: Anthropic Claude Desktop Cowork VM image handling (confirmed across v1.1348.0 through v1.2278.0, including v1.1348.0, v1.1617.0, and v1.2278.0) validates only…
CVE-2026-54316 - CVSS 9.1 (critical), 2026-06-23: Claude Code is an agentic coding tool. From 0.2.54 until 2.1.163, because the hostname huggingface.co was pre-approved as a bare hostname for the WebFetch…
CVE-2026-44467 - CVSS 7.4 (high), 2026-05-13: The Claude Desktop app gives you Claude Code with a graphical interface built for running multiple sessions side by side. From 1.2581.0 to before 1.4304.0,…
CVE-2026-44470 - CVSS 8.5 (high), 2026-05-13: The Claude Desktop app gives you Claude Code with a graphical interface built for running multiple sessions side by side. Prior to 1.3834.0, the…
CVE-2026-40068 - CVSS 8.8 (high), 2026-05-05: In versions 2.1.63 through 2.1.83 of Claude Code, the folder trust determination logic used the git worktree commondir file without validating its contents.…
CVE-2026-41686 - CVSS 4.8 (medium), 2026-05-04: Claude SDK for TypeScript provides access to the Claude API from server-side TypeScript or JavaScript applications. From version 0.79.0 to before version…
CVE-2026-39861 - CVSS 10 (critical), 2026-04-21: Claude Code is an agentic coding tool. Prior to version 2.1.64, Claude Code's sandbox did not prevent sandboxed processes from creating symlinks pointing to…
CVE-2026-35603 - CVSS 7.3 (high), 2026-04-17: Claude Code is an agentic coding tool. In versions prior to 2.1.75 on Windows, Claude Code loaded the system-wide default configuration from…
CVE-2026-34451 - CVSS 6.3 (medium), 2026-03-31: Claude SDK for TypeScript provides access to the Claude API from server-side TypeScript or JavaScript applications. From version 0.79.0 to before version…
CVE-2026-34452 - CVSS 5.8 (medium), 2026-03-31: The Claude SDK for Python provides access to the Claude API from Python applications. From version 0.86.0 to before version 0.87.0, the async local filesystem…
CVE-2026-34450 - CVSS 4.8 (medium), 2026-03-31: The Claude SDK for Python provides access to the Claude API from Python applications. From version 0.86.0 to before version 0.87.0, the local filesystem…
CVE-2026-22561 - CVSS 7.8 (high), 2026-03-31: Uncontrolled search path elements in Anthropic Claude for Windows installer (Claude Setup.exe) versions prior to 1.1.3363 allow local privilege escalation via…
CVE-2026-33068 - CVSS 8.8 (high), 2026-03-20: Claude Code is an agentic coding tool. Versions prior to 2.1.53 resolved the permission mode from settings files, including the repo-controlled…
CVE-2026-25725 - CVSS 10 (critical), 2026-02-06: Claude Code is an agentic coding tool. Prior to version 2.1.2, Claude Code's bubblewrap sandboxing mechanism failed to properly protect the…
CVE-2026-25724 - CVSS 7.5 (high), 2026-02-06: Claude Code is an agentic coding tool. Prior to version 2.1.7, Claude Code failed to strictly enforce deny rules configured in settings.json when accessing…
CVE-2026-25723 - CVSS 7.7 (high), 2026-02-06: Claude Code is an agentic coding tool. Prior to version 2.0.55, Claude Code failed to properly validate commands using piped sed operations with the echo…
CVE-2026-25722 - CVSS 9.1 (critical), 2026-02-06: Claude Code is an agentic coding tool. Prior to version 2.0.57, Claude Code failed to properly validate directory changes when combined with write operations…
CVE-2026-24053 - CVSS 7.7 (high), 2026-02-03: Claude Code is an agentic coding tool. Prior to version 2.0.74, due to a Bash command validation flaw in parsing ZSH clobber syntax, it was possible to bypass…
CVE-2026-24052 - CVSS 7.4 (high), 2026-02-03: Claude Code is an agentic coding tool. Prior to version 1.0.111, Claude Code contained insufficient URL validation in its trusted domain verification…
CVE-2026-24887 - CVSS 8.8 (high), 2026-02-03: Claude Code is an agentic coding tool. Prior to version 2.0.72, due to an error in command parsing, it was possible to bypass the Claude Code confirmation…
CVE-2026-21852 - CVSS 7.5 (high), 2026-01-21: Claude Code is an agentic coding tool. Prior to version 2.0.65, vulnerability in Claude Code's project-load flow allowed malicious repositories to exfiltrate…
CVE-2025-66032 - CVSS 9.8 (critical), 2025-12-03: Claude Code is an agentic coding tool. Prior to 1.0.93, Due to errors in parsing shell commands related to $IFS and short CLI flags, it was possible to bypass…
CVE-2025-64755 - CVSS 9.8 (critical), 2025-11-21: Claude Code is an agentic coding tool. Prior to version 2.0.31, due to an error in sed command parsing, it was possible to bypass the Claude Code read-only…
CVE-2025-65099 - CVSS 9.8 (critical), 2025-11-19: Claude Code is an agentic coding tool. Prior to version 1.0.39, when running on a machine with Yarn 3.0 or above, Claude Code could have been tricked to…
CVE-2025-59829 - CVSS 6.5 (medium), 2025-10-03: Claude Code is an agentic coding tool. Versions below 1.0.120 failed to account for symlinks when checking permission deny rules. If a user explicitly denied…