{
 "id": "AIR-2026-0333",
 "slug": "cve-2026-96620-claude-agent-sdk-command-injection-vulnerabil",
 "title": "CVE-2026-96620: Claude Agent SDK Command Injection Vulnerability",
 "summary": "A vulnerability in the Claude Agent SDK prior to version 0.2.121 allows arbitrary command execution when untrusted input is passed to the resume option, leading to MCP config injection. The issue has been patched in version 0.2.121.",
 "type": "attack_on_ai",
 "categories": [
  "infra_vuln"
 ],
 "severity": 2,
 "targets": [
  "Anthropic",
  "framework_or_tooling"
 ],
 "products": [
  "Claude Agent SDK",
  "Claude Code"
 ],
 "incident_date": "2026-10-16",
 "incident_date_precision": "day",
 "first_reported": "2026-10-16",
 "sources": [
  {
   "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-96620",
   "publisher": "NVD",
   "title": "CVE-2026-96620: Claude Agent SDK is a Python SDK for Claude Code.",
   "published_at": "2026-10-16"
  }
 ],
 "source_count": 1,
 "confidence": 0.95,
 "status": "published",
 "origin": "seed_nvd",
 "tags": [
  "CVE-2026-96620",
  "command-injection",
  "mcp"
 ],
 "created_at": "2026-10-18T06:33:31.967Z",
 "updated_at": "2026-10-18T06:33:31.967Z"
}