AI Threat Alert

Claude Code Vulnerabilities

npmAI Tools

Anthropic Claude Code CLI — agentic coding tool AI Threat Alert tracks 24 known vulnerabilities in Claude Code, 2 rated critical — an AI/ML ai tools in the npm ecosystem. Each CVE includes CVSS severity, EPSS exploit probability, patch status, and CISO-grade analysis.

Data sources
24
Total CVEs
2
Critical
npm
Ecosystem
Oct 16, 2026
Last CVE
61%
Patch Rate
5d
Avg Time to Patch
153,303 stars26,441 forks15,624 issuesLast push Oct 24, 2026
View on GitHub

Known Vulnerabilities(22 total, page 1 of 1)

SeverityCVE IDSummaryCVSSPublished
CRITICALCVE-2026-96620Claude Agent SDK: argument injection enables RCE--Oct 16, 2026HIGHCVE-2026-86063Claude Code: unverified plugin SHA checkout enables code install--Oct 13, 2026HIGHCVE-2026-103435Claude Code: TOCTOU symlink race allows out-of-sandbox write--Oct 7, 2026LOWCVE-2026-103012Claude Code: stored API key bypasses managed policy--Sep 30, 2026HIGHCVE-2026-100585OpenClaw: owner-only approval bypass in MCP bridge8.0Sep 26, 2026HIGHCVE-2026-73222Claude Code Templates: unauth RCE via shell injection8.8Aug 11, 2026MEDIUMCVE-2026-47751Claude Code Action: RCE via malicious PR .mcp.json config--Jul 16, 2026HIGHCVE-2026-49471Serena: unauth dashboard API enables RCE via memory poisoning8.3Jul 8, 2026HIGHCVE-2026-55607Claude Code: worktree bug enables sandbox-escape RCE--Jun 29, 2026MEDIUMCVE-2026-46406Claude Code: predictable temp file leaks data, symlink write--Jun 25, 2026HIGHCVE-2026-7574Claude Desktop: VM integrity bypass enables RCE8.7Jun 23, 2026HIGHCVE-2026-46580Eclipse Theia: workspace prompt injection enables RCE/exfil--Jun 18, 2026HIGHCVE-2026-44688Eclipse Theia: indirect prompt injection → RCE + exfil--Jun 18, 2026MEDIUMCVE-2026-22551@theia/ai-chat: prompt injection exfiltrates workspace secrets--Jun 18, 2026CRITICALCVE-2026-2611MLflow: cross-origin bypass enables RCE via AI agent9.6May 19, 2026HIGHCVE-2026-45136claude-code-cache-fix: hook path injection → RCE--May 13, 2026HIGHCVE-2026-44246nnU-Net: prompt injection hijacks CI/CD triage agent7.2May 12, 2026HIGHCVE-2026-40068Claude Code: git worktree trust bypass executes hooks--Apr 24, 2026HIGHCVE-2026-39861Claude Code: sandbox escape via symlink allows arbitrary write--Apr 21, 2026MEDIUMCVE-2026-35603Claude Code: config hijack via unprotected ProgramData dir--Apr 17, 2026MEDIUMCVE-2026-39398openclaw-claude-bridge: sandbox bypass exposes CLI tools--Apr 8, 2026HIGHCVE-2026-35020Claude Code CLI: OS command injection via TERMINAL env8.4Apr 6, 2026

Frequently asked questions

What is Claude Code?

Anthropic Claude Code CLI — agentic coding tool

How many known vulnerabilities does Claude Code have?

Claude Code has 24 known CVEs, 2 of them critical, tracked from NVD and GitHub Advisory.

Which ecosystem is Claude Code distributed in?

Claude Code is distributed via the npm ecosystem and categorized as ai tools.

Where does the Claude Code vulnerability data come from?

Vulnerability data is sourced from NVD and GitHub Advisory, enriched with CVSS, EPSS, exploit signals, and patch status for each CVE.

How do I assess the risk of Claude Code?

Review each CVE below — every entry shows CVSS severity, EPSS exploit probability, exploitation signals, and whether a patched version is available.

Monitor Claude Code in your stack

Get instant alerts when new vulnerabilities affect Claude Code. CISO analysis, ATLAS technique mappings, and compliance reports included.

Start Monitoring