Is CVE-2026-47090 exploited in the wild?

No. Junglewise Threat Intelligence has no report of CVE-2026-47090 being exploited in the wild.

How severe is CVE-2026-47090?

Medium severity, with a CVSS score of 4.6, published 18 May 2026.

Which products and versions are affected?

Jarrodwatts Claude HUD through 0.0.12.

Is there a fix for CVE-2026-47090?

A patch was published on 2026-04-22: Fix merged in commit 234d9aa Junglewise finds every place you run it, drafts the upgrade and applies it once you approve.

How is CVE-2026-47090 attacked?

It is attacked with local access, in a network appliance.

Am I affected by CVE-2026-47090?

Check whether you run Jarrodwatts Claude HUD at an affected version. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.

CVE-2026-47090: Claude HUD terminal injection in OSC 8 hyperlinks

CVE-2026-47090 · Severity: medium · CVSS 4.6 · Published 2026-05-18

Claude HUD is a terminal-based dashboard for monitoring Claude Code sessions. A vulnerability in how it handles project metadata allows an attacker to inject malicious terminal commands or escape sequences. If a user interacts with a specially crafted project directory or branch name, an attacker could manipulate the terminal display, capture clipboard data, or trigger unauthorized web requests, potentially compromising the user's local environment.

Technologies: Jarrodwatts Claude HUD. Vendors: Jarrodwatts.

Quick answers

Is CVE-2026-47090 exploited in the wild?: No. Junglewise Threat Intelligence has no report of CVE-2026-47090 being exploited in the wild.
How severe is CVE-2026-47090?: Medium severity, with a CVSS score of 4.6, published 18 May 2026.
Which products and versions are affected?: Jarrodwatts Claude HUD through 0.0.12.
Is there a fix for CVE-2026-47090?: A patch was published on 2026-04-22: Fix merged in commit 234d9aa Junglewise finds every place you run it, drafts the upgrade and applies it once you approve.
How is CVE-2026-47090 attacked?: It is attacked with local access, in a network appliance.
Am I affected by CVE-2026-47090?: Check whether you run Jarrodwatts Claude HUD at an affected version. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.

Technical details

The vulnerability exists in the `hyperlink()` function within `project.ts`, which constructs OSC 8 terminal hyperlink escape sequences using raw `cwd` and `branchUrl` values. Because the application fails to strip control characters or properly encode these values, an attacker can embed ESC+backslash sequences to terminate the OSC 8 sequence early and inject arbitrary ANSI codes. This can be exploited to perform OSC 52 clipboard writes, change text colors, or forge terminal prompts. Additionally, clicking a malicious branch URL can trigger outbound HTTP requests to attacker-controlled servers. The issue was addressed in commit 234d9aa by sanitizing hyperlink rendering and encoding remote branch URLs.

Affected products

jarrodwatts Claude HUD through 0.0.12

Timeline

2026-04-19: disclosed: Initial researcher outreach to maintainer
2026-04-22: patched: Fix merged in commit 234d9aa
2026-05-18: advisory: CVE published to NVD

References

This page as Markdown. Free to reuse under CC BY 4.0 with a link back.