Claude Code + SDKs
Filed as: Claude Code, Claude SDK for Python, Claude SDK for TypeScript, Claude Agent SDK, Claude Code Action
Records
48
Disclosed CVEs
46
Exploited (sev 3–4)
2
CISA KEV flagged
0
Newest record 2026-10-16 · 45 distinct CVE ids · open in the explorer (the explorer matches the first product a record names, so it can list fewer)
Patch now: confirmed exploitation or KEV · 2
Records at severity 3–4 (exploitation confirmed by CISA, the vendor or reporting) and records flagged as listed in CISA KEV. The KEV flag is the classifier’s cisa-kev tag or a source on the KEV catalog; it is recorded when the collector sees the listing, so a missing flag does not mean a CVE is absent from the catalog.
- 2025-08-27Anthropic Identifies AI Misuse in Extortion and Ransomware Campaigns3 Exploitedclaude · threat-intelligence · ransomware · extortion
- 2025-08-21Malicious Nx npm Packages Weaponize AI Coding Agents for Exfiltration3 Exploitedsupply_chain · npm · agent_hijack · data_exfiltration
Disclosures by month · last 24 months
▁ ▃▆▂▂▁▁█▂█▃▃▂▂▂▃
Nov ’2446 disclosed · peak 7 in Feb ’26Oct ’26
Disclosed CVEs, no confirmed exploitation · 46
- 2026-10-16CVE-2026-96620CVE-2026-96620: Claude Agent SDK Command Injection Vulnerability2 Disclosedcommand-injection · mcp
- 2026-10-13CVE-2026-86063CVE-2026-86063: Claude Code plugin installation flow hash pin bypass vulnerability2 Disclosedclaude-code · hash-pinning
- 2026-10-07CVE-2026-103435CVE-2026-103435: Time-of-check to time-of-use vulnerability in Claude Code sandbox2 Disclosedtoctou · symlink
- 2026-09-30CVE-2026-103012CVE-2026-103012: Claude Code API Key Precedence Policy Bypass2 Disclosedclaude_code · api_key · policy_bypass
- 2026-09-26CVE-2026-100585CVE-2026-100585: OpenClaw bypasses owner-only authorization for Claude Code prompts2 Disclosedopenclaw · claude-code · mcp
- 2026-08-14CVE-2026-49986CVE-2026-49986: Cortex MCP Server vulnerability allows improper developer root validation2 Disclosedmcp · path-traversal
- 2026-08-13CVE-2026-73614CVE-2026-73614: ClaudeHookBridge deny pattern bypass vulnerability2 Disclosedcommand-injection · bypass
- 2026-07-16CVE-2026-47751CVE-2026-47751: Claude Code Action vulnerable to malicious MCP configuration2 Disclosedmcp · rce
- 2026-07-09CVE-2026-59726Unauthenticated MCP Bridge Endpoint Exposure in Ruflo2 Disclosedmcp · authentication-bypass
- 2026-06-29CVE-2026-55607CVE-2026-55607: Claude Code sandbox escape via git worktree path confusion2 Disclosedsandbox-escape · prompt-injection
- 2026-06-25CVE-2026-46406CVE-2026-46406: Anthropic Claude Code Insecure Temporary File Handling in Copy Command2 Disclosedclaude-code · anthropic
- 2026-06-17CVE-2026-54316CVE-2026-54316: Claude Code Out-of-Band Data Exfiltration via WebFetch2 Disclosedclaude-code · data-exfiltration
- 2026-05-27CVE-2026-45136CVE-2026-45136: Remote code execution in claude-code-cache-fix2 Disclosedrce · python-injection
- 2026-05-13CVE-2026-44467CVE-2026-44467: Claude Desktop SSH Remote Development Verification Flaw2 Disclosedmitm · claude-desktop
- 2026-05-13CVE-2026-44470CVE-2026-44470: Claude Desktop CoworkVMService File Creation Vulnerability2 Disclosedlocal-privilege-escalation · claude-desktop
- 2026-04-29CVE-2026-41686CVE-2026-41686: Claude SDK TypeScript Insecure File Permissions2 Disclosedpermissions · sdk
- 2026-04-24
- 2026-04-21
- 2026-04-17CVE-2026-35603CVE-2026-35603: Claude Code Insecure Configuration Loading LPE2 Disclosedprivilege-escalation
- 2026-04-01CVE-2026-34452CVE-2026-34452: Anthropic Claude Python SDK Sandbox Escape2 Disclosedanthropic · sandbox-escape
- 2026-04-01CVE-2026-34451CVE-2026-34451: Claude TypeScript SDK Memory Tool Sandbox Escape2 Disclosedsandbox-escape · prompt-injection
- 2026-04-01CVE-2026-34450CVE-2026-34450: Claude Python SDK Insecure File Permissions2 Disclosedinsecure-permissions
- 2026-03-19CVE-2026-33068Claude Code workspace trust dialog bypass via settings file2 Disclosedaccess-control · bypass
- 2026-03-11CVE-2026-31862CVE-2026-31862: RCE vulnerability in Cloud CLI Claude Code UI2 Disclosedrce · command-injection
- 2026-02-06CVE-2026-25722CVE-2026-25722: Claude Code Directory Change Write Protection Bypass2 Disclosedwrite-restriction-bypass · claude-code
- 2026-02-06CVE-2026-25723CVE-2026-25723: Claude Code Command Injection Bypass2 Disclosedcommand-injection · claude-code
- 2026-02-06CVE-2026-25725CVE-2026-25725: Claude Code Sandbox Escape via Settings Injection2 Disclosedsandbox-escape · configuration-injection
- 2026-02-06
- 2026-02-03CVE-2026-24887CVE-2026-24887: Claude Code command injection in find command bypasses prompts2 Disclosedcommand-injection
- 2026-02-03CVE-2026-24053CVE-2026-24053: Claude Code path restriction bypass via ZSH clobber2 Disclosedarbitrary-file-write
- 2026-02-03CVE-2026-24052CVE-2026-24052: Claude Code domain validation bypass enables arbitrary requests2 Discloseddomain-bypass
- 2026-01-21CVE-2026-21852CVE-2026-21852: Claude Code Data Leak via Malicious Config2 Discloseddata-leak · infra_vuln
- 2025-12-03CVE-2025-66032CVE-2025-66032: Claude Code Command Validation Bypass2 Disclosedrce · command-injection
- 2025-11-20CVE-2025-64755CVE-2025-64755: Anthropic Claude Code Sed Command Validation Bypass2 Disclosedarbitrary-file-write · claude-code
- 2025-11-19CVE-2025-65099CVE-2025-65099: Claude Code vulnerable to command execution prior to startup trust dialog2 Disclosedclaude-code · command-execution
- 2025-10-03
- 2025-10-03CVE-2025-59536CVE-2025-59536: Claude Code startup trust dialog code injection vulnerability2 Disclosedcode-injection
- 2025-09-30CVE-2025-59956CVE-2025-59956: AgentAPI Client-Side DNS Rebinding Data Exfiltration Flaw2 Discloseddns_rebinding · data_leak
- 2025-09-24CVE-2025-59828CVE-2025-59828: Claude Code vulnerable to arbitrary code execution via Yarn2 Disclosedclaude-code · code-execution
- 2025-09-10CVE-2025-58764CVE-2025-58764: Claude Code command parsing bypasses confirmation prompt2 Disclosedprompt-bypass
- 2025-09-10CVE-2025-59041CVE-2025-59041: Claude Code arbitrary code execution via git config email2 Disclosedrce · git
- 2025-09-03Claude Code Arbitrary Code Execution via Insufficient Startup Warning2 Disclosedarbitrary-code-execution
- 2025-08-16CVE-2025-55284CVE-2025-55284: Claude Code Allowlist Bypass Enables Unauthorized File Read2 Disclosedallowlist-bypass
- 2025-08-04CVE-2025-54795CVE-2025-54795: Claude Code Command Prompt Execution Bypass2 Disclosedclaude-code · command-injection
- 2025-08-04CVE-2025-54794CVE-2025-54794: Claude Code Path Restriction Bypass Vulnerability2 Disclosedclaude-code · path-traversal
- 2025-06-23CVE-2025-52882CVE-2025-52882: Claude Code improper authorization via websocket connections2 Disclosedwebsocket · authorization
This page lists what has been reported, not what to do about it. Versions and fixes are in each linked advisory; check the vendor’s own advisory before acting.