AI and data stack advisories

Severe, 6 weeks1496Projects326

1496 severe, 6 weeks · 326 projects

Packages

Anthropic security advisories

41 advisories · 17 critical or high in 12 months · latest Sep 30

Advisories page

41 advisories

Low 2.0Sep 30Claude Code selected an API key stored by Claude CodeCVE-2026-103012fixed in 2.1.260High 8.5Sep 25Claude Desktop (macOS): opening a malicious file from a Cowork folder could run commands on the hostGHSA-v234-4jrq-mgg6fixed in 1.15962.0Critical 9.2Sep 12Argument Injection via resume Option Allows Arbitrary Command ExecutionCVE-2026-96620fixed in 0.2.121Medium 6.3Jul 1Memory Exhaustion Denial of Service in decode_unknown_field via Unbounded AllocationCVE-2026-55407fixed in 0.8.0 +1Medium 5.9Jul 1Use-After-Free in OwnedView via Unsound 'static Lifetime Promotion in DerefCVE-2026-55406fixed in 0.7.0Medium 4.4Jun 25Insecure Temporary File in /copy Command Enables Response Disclosure and Symlink-Based File WriteCVE-2026-46406fixed in 2.1.128High 7.7Jun 25Sandbox Escape via Git Worktree Path Confusion Allows Unsandboxed Code ExecutionCVE-2026-55607fixed in 2.1.163Medium 6.0Jun 13Out-of-Band Data Exfiltration via Pre-Approved HuggingFace Domain in WebFetchCVE-2026-54316fixed in 2.1.163Medium 5.3May 20Malicious MCP Server Configuration in PRs Enables Remote Code Execution and Secret ExfiltrationCVE-2026-47751fixed in 1.0.74High 7.4May 6SSH Host Key Verification Bypass Allows Man-in-the-Middle Attack on Remote SessionsCVE-2026-44467fixed in 1.4304.0High 8.5May 6Local Privilege Escalation via Directory Junction in CoworkVMServiceCVE-2026-44470fixed in 1.3834.0Medium 4.8Apr 24Claude SDK for TypeScript has Insecure Default File Permissions in Local Filesystem Memory ToolCVE-2026-41686fixed in 0.91.1High 7.7Apr 24Trust Dialog Bypass via Git Worktree Spoofing Allows Arbitrary Code ExecutionCVE-2026-40068fixed in 2.1.84High 7.7Apr 20Sandbox Escape via Symlink Following Allows Arbitrary File Write Outside WorkspaceCVE-2026-39861fixed in 2.1.64Medium 5.4Apr 17Insecure System-Wide Configuration Loading Enables Local Privilege Escalation on WindowsCVE-2026-35603fixed in 2.1.75Medium 5.8Mar 31Memory Tool Path Validation Race Condition Allows Sandbox EscapeCVE-2026-34452fixed in 0.87.0Medium 4.8Mar 31Insecure Default File Permissions in Local Filesystem Memory ToolCVE-2026-34450fixed in 0.87.0Medium 6.3Mar 31Memory Tool Path Validation Allows Sandbox Escape to Sibling DirectoriesCVE-2026-34451fixed in 0.81.0High 7.7Mar 18Workspace Trust Dialog Bypass via Repo-Controlled Settings FileCVE-2026-33068fixed in 2.1.53High 7.7Feb 6Command Injection via Directory Change Bypasses Write ProtectionCVE-2026-25722fixed in v2.0.57High 7.7Feb 6Command Injection via Piped sed Command Bypasses File Write RestrictionsCVE-2026-25723fixed in v2.0.55High 7.7Feb 6Sandbox Escape via Persistent Configuration Injection in settings.jsonCVE-2026-25725fixed in v2.1.2Low 2.3Feb 6Permission Deny Bypass Through Symbolic LinksCVE-2026-25724fixed in v2.1.7High 7.7Feb 3Command Injection in find Command Bypasses User Approval PromptCVE-2026-24887fixed in v2.0.72High 7.7Feb 3Path Restriction Bypass via ZSH Clobber Allows Arbitrary File WritesCVE-2026-24053fixed in v2.0.74High 7.1Feb 3Domain Validation Bypass Allows Automatic Requests to Attacker-Controlled DomainsCVE-2026-24052fixed in v1.0.111Medium 5.3Jan 20Anthropic: information disclosureCVE-2026-21852fixed in v2.0.65Low 1.8Dec 4, 2025Network Sandboxing EscapeCVE-2025-66479fixed in 0.0.16High 8.7Dec 3, 2025Command Validation Bypass Allows Arbitrary Code ExecutionCVE-2025-66032fixed in v1.0.93High 8.7Nov 20, 2025Sed Command Validation Bypass Allows Arbitrary File WritesCVE-2025-64755fixed in v2.0.31High 7.7Nov 19, 2025Command execution prior to Claude Code startup trust dialogCVE-2025-65099fixed in v1.0.39High 8.7Oct 3, 2025Command execution prior to Claude Code startup trust dialogCVE-2025-59536fixed in v1.0.111Low 2.3Oct 3, 2025Permission deny bypass through symlinkCVE-2025-59829fixed in v1.0.120High 7.7Sep 24, 2025Claude Code Vulnerable to Arbitrary Code Execution via Plugin Autoloading with Specific Yarn VersionsCVE-2025-59828fixed in v1.0.39High 8.7Sep 9, 2025Command Injection in Claude Code rg command allowed bypass of user approval prompt for command executionCVE-2025-58764fixed in 1.0.105High 8.7Sep 9, 2025Claude Code vulnerable to arbitrary code execution caused by maliciously configured git emailCVE-2025-59041fixed in 1.0.105High 8.7Sep 2, 2025Claude Code Vulnerable to Arbitrary Code Execution Due to Insufficient Startup WarningGHSA-ph6w-f82w-28w6fixed in v1.0.87High 7.1Aug 15, 2025Permissive Default Allowlist Enables Unauthorized File Read and Network Exfiltration in Claude CodeCVE-2025-55284fixed in v1.0.4High 7.7Aug 1, 2025Anthropic: path traversalCVE-2025-54794fixed in v0.2.111High 8.7Aug 1, 2025Command Injection in Claude Code echo command allowed bypass of user approval prompt for command executionCVE-2025-54795fixed in v1.0.20High 8.8Jun 23, 2025Claude Code IDE extensions allow websocket connections from arbitrary originsCVE-2025-52882fixed in 1.0.24andabove +2
About Anthropic

Security advisories Anthropic publishes for its own products.

trust.anthropic.com/resources#6a44049fd659a87d0068f0c5Anthropic

Anthropic elsewhere on Ibis: Acquisitions · Funding · Paydays · Releases · Repos · TechConf · Trending