Product by Anthropic
Anthropic Claude Code
26 known vulnerabilities in Anthropic Claude Code (Anthropic), 0 of them actively exploited (CISA KEV).
Key figures
26
Vulnerabilities
0
Actively exploited (KEV)
0
Used by ransomware
12
Critical
Vulnerabilities
Actively exploited vulnerabilities (CISA KEV) first, then by priority. Click a column header to re-sort the table.
| High | CVE-2025-59536 | Claude Code's startup trust dialog could lead to Command Execution attack | 8.8 | |
| High | CVE-2026-21852 | Claude Code Leaks Data via Malicious Environment Configuration Before Trust Confirmation | 7.5 | |
| Critical | CVE-2025-54794 | Anthropics Claude-code: Path Traversal | 9.1 | |
| Critical | CVE-2025-54795 | Claude Code echo command allowed bypass of user approval prompt for command execution | 9.8 | |
| Critical | CVE-2026-39861 | Claude Code: Sandbox Escape via Symlink Following Allows Arbitrary File Write Outside Workspace | 10.0 | |
| High | CVE-2026-55607 | Claude Code: Sandbox Escape via Git Worktree Path Confusion Allows Unsandboxed Code Execution | 8.8 | |
| Critical | CVE-2025-66032 | Claude Code Command Validation Bypass Allows Arbitrary Code Execution | 9.8 | |
| Critical | CVE-2025-64755 | @anthropic-ai/claude-code has Sed Command Validation Bypass that Allows Arbitrary File Writes | 9.8 | |
| Critical | CVE-2026-54316 | Claude Code: Out-of-Band Data Exfiltration via Pre-Approved HuggingFace Domain in WebFetch | 9.1 | |
| Critical | CVE-2026-25725 | Claude Code Has Sandbox Escape via Persistent Configuration Injection in settings.json | 10.0 | |
| High | CVE-2026-24887 | Claude Code has a Command Injection in find Command Bypasses User Approval Prompt | 8.8 | |
| Critical | CVE-2025-65099 | Claude Code vulnerable to command execution prior to startup trust dialog | 9.8 | |
| Critical | CVE-2025-58764 | Anthropics Claude-code: Code Injection | 9.8 | |
| Critical | CVE-2025-59041 | Claude Code vulnerable to arbitrary code execution caused by maliciously configured git email | 9.8 | |
| Critical | CVE-2026-25722 | Claude Code Vulnerable to Command Injection via Directory Change Bypasses Write Protection | 9.1 | |
| High | CVE-2026-24053 | Cluade Code has a Path Restriction Bypass via ZSH Clobber which Allows Arbitrary File Writes | 6.5 | |
| Critical | CVE-2025-59828 | Anthropics Claude-code: Inclusion of Functionality from Untrusted Control Sphere | 9.8 | |
| High | CVE-2025-55284 | Anthropics Claude-code: OS Command Injection | 7.5 | |
| High | CVE-2026-40068 | Claude Code arbitrary code execution via git worktree commondir trust dialog bypass | 8.8 | |
| High | CVE-2026-33068 | Claude Code has a Workspace Trust Dialog Bypass via Repo-Controlled Settings File | 8.8 | |
| High | CVE-2026-25724 | Claude Code Has Permission Deny Bypass Through Symbolic Links | 7.5 | |
| High | CVE-2026-24052 | Anthropics Claude-code: Open Redirect | 7.4 | |
| High | CVE-2026-25723 | Claude Code Vulnerable to Command Injection via Piped sed Command Bypasses File Write Restrictions | 6.5 | |
| Medium | CVE-2025-59829 | Claude Code: Permission deny bypass is possible through symlink | 6.5 | |
| High | CVE-2026-35603 | Anthropics Claude-code: Untrusted Search Path | 7.3 |