Login Request a demo
CL
Product
claude-code
by anthropics · last CVE Oct 13, 2026
30
CVEs
0
On KEV
10.0
Max CVSS
1
New 30D
Vulnerabilities30In the news0Timeline
Severity mix
Critical 12High 13Medium 5Low 0
Severity
All severities30Critical12High13Medium5Low0
Exploitation
On CISA KEV0Exploited in the wild0
Watch

Add claude-code to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2026-44467
6.8
0%
May 13
Claude Desktop: SSH Host Key Verification Bypass Allows Man-in-the-Middle Attack on Remote Sessions
Affected: >= 1.2581.0, < 1.4304.0
CVE-2026-25723
6.5
0%
Feb 6
Claude Code Vulnerable to Command Injection via Piped sed Command Bypasses File Write Restrictions
Affected: < 2.0.55
CVE-2026-24053
6.5
1%
Feb 3
Cluade Code has a Path Restriction Bypass via ZSH Clobber which Allows Arbitrary File Writes
Affected: < 2.0.74
CVE-2025-59829
6.5
0%
Oct 3
Claude Code: Permission deny bypass is possible through symlink
Affected: < 1.0.120
CVE-2026-46406
6.1
0%
Jun 29
Claude Code: Insecure Temporary File in /copy Command Enables Response Disclosure and Symlink-Based File Write
Affected: >= 2.1.59, < 2.1.128
Showing 5