Claude Code vulnerabilities and CVEs
The Beam CVE database tracks 29 security advisories for Claude Code: 23 high, 4 medium and 2 low severity. The newest is CVE-2026-86063, published Oct 15, 2026 and fixed in 2.1.179.
Anthropic's terminal coding agent. It runs shell commands, edits files and loads MCP servers, plugins and hooks from the project it opens.
Check your version: npm ls @anthropic-ai/claude-code
- Vulnerabilities tracked
- 29
- Critical
- 0
- Known exploited (CISA KEV)
- 0
- Published in the last 30 days
- 1
All entries, newest first
CVE-2026-86063
Claude Code: Plugin Hash Pin Bypass Allows Bypass of Hash Pinning
high7.5Oct 15, 2026CVE-2026-55607
Claude Code: Sandbox Escape via Git Worktree Path Confusion Allows Unsandboxed Code Execution
high7.7Jul 24, 2026CVE-2026-46406
@anthropic-ai/claude-code has an Insecure Temporary File in /copy Command that Enables Response Disclosure and Symlink-Based File Write
medium4.4Jun 25, 2026CVE-2026-54316
Claude Code: Out-of-Band Data Exfiltration via Pre-Approved HuggingFace Domain in WebFetch
medium9.1Jun 17, 2026CVE-2026-40068
Claude Code: Trust Dialog Bypass via Git Worktree Spoofing Allows Arbitrary Code Execution
high7.7Apr 24, 2026CVE-2026-39861
Claude Code: Sandbox Escape via Symlink Following Allows Arbitrary File Write Outside Workspace
high10.0Apr 21, 2026CVE-2026-35603
Claude Code: Insecure System-Wide Configuration Loading Enables Local Privilege Escalation on Windows
medium7.3Apr 17, 2026CVE-2026-33068
Claude Code has a Workspace Trust Dialog Bypass via Repo-Controlled Settings File
high7.7Mar 19, 2026CVE-2026-25722
Claude Code Vulnerable to Command Injection via Directory Change Bypasses Write Protection
high7.7Feb 6, 2026CVE-2026-25723
Claude Code Vulnerable to Command Injection via Piped sed Command Bypasses File Write Restrictions
high7.7Feb 6, 2026CVE-2026-25724
Claude Code has Permission Deny Bypass Through Symbolic Links
low2.3Feb 6, 2026CVE-2026-25725
Claude Code has Sandbox Escape via Persistent Configuration Injection in settings.json
high7.7Feb 6, 2026CVE-2026-24052
Claude Code has a Domain Validation Bypass which Allows Automatic Requests to Attacker-Controlled Domains
high7.1Feb 3, 2026CVE-2026-24053
Claude Code has a Path Restriction Bypass via ZSH Clobber which Allows Arbitrary File Writes
high7.7Feb 3, 2026CVE-2026-24887
Claude Code has a Command Injection in find Command Bypasses User Approval Prompt
high7.7Feb 3, 2026CVE-2026-21852
Claude Code Leaks Data via Malicious Environment Configuration Before Trust Confirmation
medium5.3Jan 21, 2026CVE-2025-66032
Claude Code Command Validation Bypass Allows Arbitrary Code Execution
high8.7Dec 3, 2025CVE-2025-64755
@anthropic-ai/claude-code has Sed Command Validation Bypass that Allows Arbitrary File Writes
high8.7Nov 20, 2025CVE-2025-65099
Claude Code vulnerable to command execution prior to startup trust dialog
high7.7Nov 19, 2025CVE-2025-59536
Claude Code can execute commands prior to the startup trust dialog
high8.7Oct 3, 2025CVE-2025-59829
Claude Code permission deny bypass through symlink
low2.3Oct 3, 2025CVE-2025-59828
Claude Code Vulnerable to Arbitrary Code Execution via Plugin Autoloading with Specific Yarn Versions
high7.7Sep 24, 2025CVE-2025-58764
Claude Code rg vulnerability does not protect against approval prompt bypass
high8.7Sep 10, 2025CVE-2025-59041
Claude Code vulnerable to arbitrary code execution caused by maliciously configured git email
high8.5Sep 10, 2025GHSA-ph6w-f82w-28w6
Claude Code Vulnerable to Arbitrary Code Execution Due to Insufficient Startup Warning
high8.7Sep 3, 2025CVE-2025-55284
Claude Code's Permissive Default Allowlist Enables Unauthorized File Read and Network Exfiltration in Claude Code
high7.1Aug 18, 2025CVE-2025-54794
Claude Code Research Preview has a Path Restriction Bypass which could allow unauthorized file access
high7.7Aug 4, 2025CVE-2025-54795
Claude Code echo command allowed bypass of user approval prompt for command execution
high8.7Aug 4, 2025CVE-2025-52882
Claude Code Improper Authorization via websocket connections from arbitrary origins
high8.8Jun 23, 2025