Vendor
Anthropic
38 known vulnerabilities in products by Anthropic, 0 of them actively exploited (CISA KEV).
Key figures
38
Vulnerabilities
0
Actively exploited (KEV)
0
Used by ransomware
13
Critical
Vulnerabilities
Actively exploited vulnerabilities (CISA KEV) first, then by priority. Click a column header to re-sort the table.
| High | CVE-2025-59536 | Claude Code's startup trust dialog could lead to Command Execution attack | 8.8 | |
| High | CVE-2026-21852 | Claude Code Leaks Data via Malicious Environment Configuration Before Trust Confirmation | 7.5 | |
| Critical | CVE-2025-54794 | Anthropics Claude-code: Path Traversal | 9.1 | |
| Critical | CVE-2025-54795 | Claude Code echo command allowed bypass of user approval prompt for command execution | 9.8 | |
| Critical | CVE-2026-39861 | Claude Code: Sandbox Escape via Symlink Following Allows Arbitrary File Write Outside Workspace | 10.0 | |
| High | CVE-2026-55607 | Claude Code: Sandbox Escape via Git Worktree Path Confusion Allows Unsandboxed Code Execution | 8.8 | |
| Critical | CVE-2025-66032 | Claude Code Command Validation Bypass Allows Arbitrary Code Execution | 9.8 | |
| Critical | CVE-2025-64755 | @anthropic-ai/claude-code has Sed Command Validation Bypass that Allows Arbitrary File Writes | 9.8 | |
| Critical | CVE-2026-54316 | Claude Code: Out-of-Band Data Exfiltration via Pre-Approved HuggingFace Domain in WebFetch | 9.1 | |
| Critical | CVE-2026-25725 | Claude Code Has Sandbox Escape via Persistent Configuration Injection in settings.json | 10.0 | |
| High | CVE-2026-24887 | Claude Code has a Command Injection in find Command Bypasses User Approval Prompt | 8.8 | |
| Critical | CVE-2025-65099 | Claude Code vulnerable to command execution prior to startup trust dialog | 9.8 | |
| Critical | CVE-2025-58764 | Anthropics Claude-code: Code Injection | 9.8 | |
| Critical | CVE-2025-59041 | Claude Code vulnerable to arbitrary code execution caused by maliciously configured git email | 9.8 | |
| Critical | CVE-2026-25722 | Claude Code Vulnerable to Command Injection via Directory Change Bypasses Write Protection | 9.1 | |
| High | CVE-2026-103435 | Arbitrary File Write via Write-Time Symlink Following (TOCTOU) in Claude Code | — | |
| High | CVE-2026-0621 | MCP TypeScript SDK UriTemplate Exploded Array Pattern ReDoS | 7.5 | |
| High | CVE-2026-24053 | Cluade Code has a Path Restriction Bypass via ZSH Clobber which Allows Arbitrary File Writes | 6.5 | |
| Critical | CVE-2025-59828 | Anthropics Claude-code: Inclusion of Functionality from Untrusted Control Sphere | 9.8 | |
| Critical | CVE-2025-34072 | Anthropic Slack MCP Server Data Exfiltration via Link Unfurling | — | |
| High | CVE-2025-55284 | Anthropics Claude-code: OS Command Injection | 7.5 | |
| High | CVE-2026-40068 | Claude Code arbitrary code execution via git worktree commondir trust dialog bypass | 8.8 | |
| High | CVE-2026-33068 | Claude Code has a Workspace Trust Dialog Bypass via Repo-Controlled Settings File | 8.8 | |
| High | CVE-2026-25724 | Claude Code Has Permission Deny Bypass Through Symbolic Links | 7.5 | |
| High | CVE-2026-7574 | Anthropic Claude Desktop Cowork VM Image Contents Not Validated Before Use | 8.7 |
News
Products
| Anthropic Claude Code | 26 | 0 |