By vendor

Anthropic vulnerabilities

Known CVEs affecting Anthropic products, prioritized by severity, with SEC.co remediation and detection guidance.

2 published vulnerabilities

• CVE-2026-55607HIGH 8.8

  Claude Code versions 2.1.38 through 2.1.162 contain a sandbox escape vulnerability that allows attackers to execute arbitrary code on a user's machine outside the seatbelt sandbox. The flaw stems from improper handling of git worktrees, which can be manipulated to create directories named ".git" and access files outside the intended sandbox boundaries. An attacker can exploit this by hosting a malicious repository containing prompt injection content; when a user clones the repository and runs Claude Code against it, symlink manipulation and git fsmonitor execution during worktree operations can overwrite critical shell configuration files (such as .zshenv) in the user's home directory, achieving code execution with the user's privileges.

• CVE-2026-46406MEDIUM 6.1

  Claude Code versions 2.1.59 through 2.1.128 had a local file handling vulnerability in the /copy command that could leak sensitive information or allow file manipulation. When the command executed, it wrote responses to a predictable location (/tmp/claude/response.md) with insufficient protections. Any user on the system could read files written there, potentially exposing secrets or credentials. Additionally, an attacker could plant a symlink at that location to trick the tool into overwriting arbitrary files with command output. This vulnerability requires local system access and relies on a privileged user running the /copy command, limiting its scope but creating real risk in multi-user or containerized environments.