CVE database · Agent frameworks and SDKs
Anthropic SDKs vulnerabilities and CVEs
The Beam CVE database tracks 4 security advisories for Anthropic SDKs: 4 medium severity. The newest is CVE-2026-41686, published Apr 29, 2026 and fixed in 0.91.1.
Anthropic's official client libraries for the Claude API.
Check your version: npm ls @anthropic-ai/sdk or pip show anthropic
- Vulnerabilities tracked
- 4
- Critical
- 0
- Known exploited (CISA KEV)
- 0
- Published in the last 30 days
- 0
All entries, newest first
CVE-2026-41686
Claude SDK for TypeScript has Insecure Default File Permissions in Local Filesystem Memory Tool
medium4.8Apr 29, 2026CVE-2026-34450
Claude SDK for Python has Insecure Default File Permissions in Local Filesystem Memory Tool
medium4.8Apr 1, 2026CVE-2026-34451
Claude SDK for TypeScript: Memory Tool Path Validation Allows Sandbox Escape to Sibling Directories
medium5.4Apr 1, 2026CVE-2026-34452
Claude SDK for Python: Memory Tool Path Validation Race Condition Allows Sandbox Escape
medium5.3Apr 1, 2026