AN
Vendor
Anthropic
40
CVEs
1
On KEV
3
New 30D
Products
BU9.8
Bun
Anthropic
1 CVEs1 on KEV1 new
AN7.7
@anthropic-ai/claude-code
Anthropic
2 CVEs0 on KEV2 new
CC10.0
Claude Code
Anthropic
26 CVEs0 on KEV0 new
CD7.8
Claude Desktop
Anthropic
2 CVEs0 on KEV0 new
CS5.3
Claude Sdk For Python
Anthropic
2 CVEs0 on KEV0 new
CS5.4
Claude Sdk For Typescript
Anthropic
2 CVEs0 on KEV0 new
CL7.8
Claude
Anthropic
1 CVEs0 on KEV0 new
CD8.7
Claude Desktop Cowork
Anthropic
1 CVEs0 on KEV0 new
CD7.8
Claude Desktop - Windows
Anthropic
1 CVEs0 on KEV0 new
MT7.5
MCP TypeScript SDK
Anthropic
1 CVEs0 on KEV0 new
SM9.3
Slack MCP Server
Anthropic
1 CVEs0 on KEV0 new
Recent CVEs
| CVE | Product | CVSS | Published | Summary |
|---|---|---|---|---|
| CVE-2026-111497 In wildKEV | BU Bun Anthropic | 9.8 | Oct 22 | Out-of-Bounds Write in Google Brotli Decoder |
| CVE-2026-103435 | AN @anthropic-ai/claude-code Anthropic | 7.7 | Oct 7 | Arbitrary File Write via Write-Time Symlink Following (TOCTOU) in Claude Code |
| CVE-2026-103012 | AN @anthropic-ai/claude-code Anthropic | 2.0 | Sep 30 | Claude Code selected an API key stored by Claude Code, for example from an earlier `/login` or written directly to its configuration, ahead of the user's valid Claude Enterprise… |
| CVE-2026-55607 | CC Claude Code Anthropic | 8.8 | Jun 29 | Claude Code: Sandbox Escape via Git Worktree Path Confusion Allows Unsandboxed Code Execution |
| CVE-2026-46406 | CC Claude Code Anthropic | 6.1 | Jun 29 | Claude Code: Insecure Temporary File in /copy Command Enables Response Disclosure and Symlink-Based File Write |
| CVE-2026-7574 | CD Claude Desktop Cowork Anthropic | 8.7 | Jun 23 | Anthropic Claude Desktop Cowork VM Image Contents Not Validated Before Use |
| CVE-2026-54316 | CC Claude Code Anthropic | 9.1 | Jun 23 | Claude Code: Out-of-Band Data Exfiltration via Pre-Approved HuggingFace Domain in WebFetch |
| CVE-2026-44470 | CD Claude Desktop Anthropic | 7.8 | May 13 | Claude Desktop: Local Privilege Escalation via Directory Junction in CoworkVMService |
| CVE-2026-44467 | CD Claude Desktop Anthropic | 6.8 | May 13 | Claude Desktop: SSH Host Key Verification Bypass Allows Man-in-the-Middle Attack on Remote Sessions |
| CVE-2026-40068 | CC Claude Code Anthropic | 8.8 | May 5 | Claude Code arbitrary code execution via git worktree commondir trust dialog bypass |
| CVE-2026-41686 | CS Claude Sdk For Typescript Anthropic | 4.4 | May 4 | Claude SDK for TypeScript has Insecure Default File Permissions in Local Filesystem Memory Tool |
| CVE-2026-39861 | CC Claude Code Anthropic | 10.0 | Apr 21 | Claude Code: Sandbox Escape via Symlink Following Allows Arbitrary File Write Outside Workspace |
| CVE-2026-35603 | CC Claude Code Anthropic | 7.3 | Apr 17 | Claude Code: Insecure System-Wide Configuration Loading Enables Local Privilege Escalation on Windows |
| CVE-2026-34451 | CS Claude Sdk For Typescript Anthropic | 5.4 | Mar 31 | Claude SDK for TypeScript: Memory Tool Path Validation Allows Sandbox Escape to Sibling Directories |
| CVE-2026-34450 | CS Claude Sdk For Python Anthropic | 4.4 | Mar 31 | Claude SDK for Python: Insecure Default File Permissions in Local Filesystem Memory Tool |
| CVE-2026-34452 | CS Claude Sdk For Python Anthropic | 5.3 | Mar 31 | Claude SDK for Python: Memory Tool Path Validation Race Condition Allows Sandbox Escape |
| CVE-2026-22561 | CD Claude Desktop - Windows Anthropic | 7.8 | Mar 31 | Uncontrolled search path elements in Anthropic Claude for Windows installer (Claude Setup.exe) versions prior to 1.1.3363 allow local privilege escalation via DLL search-order… |
| CVE-2026-33068 | CC Claude Code Anthropic | 8.8 | Mar 20 | Claude Code has a Workspace Trust Dialog Bypass via Repo-Controlled Settings File |
| CVE-2026-25725 | CC Claude Code Anthropic | 10.0 | Feb 6 | Claude Code Has Sandbox Escape via Persistent Configuration Injection in settings.json |
| CVE-2026-25724 | CC Claude Code Anthropic | 7.5 | Feb 6 | Claude Code Has Permission Deny Bypass Through Symbolic Links |
| CVE-2026-25723 | CC Claude Code Anthropic | 6.5 | Feb 6 | Claude Code Vulnerable to Command Injection via Piped sed Command Bypasses File Write Restrictions |
| CVE-2026-25722 | CC Claude Code Anthropic | 9.1 | Feb 6 | Claude Code Vulnerable to Command Injection via Directory Change Bypasses Write Protection |
| CVE-2026-24887 | CC Claude Code Anthropic | 8.8 | Feb 3 | Claude Code has a Command Injection in find Command Bypasses User Approval Prompt |
| CVE-2026-24053 | CC Claude Code Anthropic | 6.5 | Feb 3 | Cluade Code has a Path Restriction Bypass via ZSH Clobber which Allows Arbitrary File Writes |
| CVE-2026-24052 | CC Claude Code Anthropic | 7.4 | Feb 3 | Claude Code has a Domain Validation Bypass which Allows Automatic Requests to Attacker-Controlled Domains |
| CVE-2026-21852 | CC Claude Code Anthropic | 7.5 | Jan 21 | Claude Code Leaks Data via Malicious Environment Configuration Before Trust Confirmation |
| CVE-2026-0621 | MT MCP TypeScript SDK Anthropic | 7.5 | Jan 5 | MCP TypeScript SDK UriTemplate Exploded Array Pattern ReDoS |
| CVE-2025-66032 | CC Claude Code Anthropic | 9.8 | Dec 3 | Claude Code Command Validation Bypass Allows Arbitrary Code Execution |
| CVE-2025-64755 | CC Claude Code Anthropic | 9.8 | Nov 21 | @anthropic-ai/claude-code has Sed Command Validation Bypass that Allows Arbitrary File Writes |
| CVE-2025-65099 | CC Claude Code Anthropic | 9.8 | Nov 19 | Claude Code vulnerable to command execution prior to startup trust dialog |
| CVE-2025-59829 | CC Claude Code Anthropic | 6.5 | Oct 3 | Claude Code: Permission deny bypass is possible through symlink |
| CVE-2025-59536 | CC Claude Code Anthropic | 8.8 | Oct 3 | Claude Code's startup trust dialog could lead to Command Execution attack |
| CVE-2025-59828 | CC Claude Code Anthropic | 9.8 | Sep 24 | Claude Code Vulnerable to Arbitrary Code Execution via Plugin Autoloading with Specific Yarn Versions |
| CVE-2025-59041 | CC Claude Code Anthropic | 9.8 | Sep 10 | Claude Code vulnerable to arbitrary code execution caused by maliciously configured git email |
| CVE-2025-58764 | CC Claude Code Anthropic | 9.8 | Sep 10 | Claude Code rg command had Command Injection that allowed bypass of user approval prompt for command execution |
| CVE-2025-55284 | CC Claude Code Anthropic | 7.5 | Aug 16 | Claude Code's Permissive Default Allowlist Enables Unauthorized File Read and Network Exfiltration in Claude Code |
| CVE-2025-54794 | CC Claude Code Anthropic | 9.1 | Aug 5 | Claude Code Research Preview has a Path Restriction Bypass which could allow unauthorized file access |
| CVE-2025-54795 | CC Claude Code Anthropic | 9.8 | Aug 5 | Claude Code echo command allowed bypass of user approval prompt for command execution |
| CVE-2025-34072 | SM Slack MCP Server Anthropic | 9.3 | Jul 2 | Anthropic Slack MCP Server Data Exfiltration via Link Unfurling |