Executive brief
Claude Code is an AI-powered code generation and execution tool that runs commands on developers' machines. A vulnerability in command parsing allows attackers to bypass the user confirmation prompt and execute untrusted system commands, such as reading files or installing malware. Exploitation requires the ability to inject malicious content into Claude's context window, such as through a crafted file or prompt.
Technical details
Claude Code contains a command injection vulnerability (CWE-78, CWE-94) in its find command parsing logic that permits bypass of the user approval confirmation prompt. The vulnerability allows an attacker to inject shell metacharacters that are not properly sanitized before command execution. Exploitation requires network access and the ability to add untrusted content to the Claude Code context window (e.g., by providing a malicious file or prompt), with passive user interaction (the user runs Claude Code but does not explicitly approve the injected command). An attacker can achieve arbitrary command execution with the privileges of the Claude Code process. The fix was released in version 2.0.72 and has been automatically deployed to users on auto-update.
Affected products
- Anthropic Claude Code < 2.0.72
Timeline
- 2026-02-03: disclosed
- 2026-02-03: patched: Version 2.0.72 released