Executive brief
Claude HUD is a terminal-based dashboard for monitoring Claude Code sessions. A vulnerability in how it handles project metadata allows an attacker to inject malicious terminal commands or escape sequences. If a user interacts with a specially crafted project directory or branch name, an attacker could manipulate the terminal display, capture clipboard data, or trigger unauthorized web requests, potentially compromising the user's local environment.
Technical details
The vulnerability exists in the `hyperlink()` function within `project.ts`, which constructs OSC 8 terminal hyperlink escape sequences using raw `cwd` and `branchUrl` values. Because the application fails to strip control characters or properly encode these values, an attacker can embed ESC+backslash sequences to terminate the OSC 8 sequence early and inject arbitrary ANSI codes. This can be exploited to perform OSC 52 clipboard writes, change text colors, or forge terminal prompts. Additionally, clicking a malicious branch URL can trigger outbound HTTP requests to attacker-controlled servers. The issue was addressed in commit 234d9aa by sanitizing hyperlink rendering and encoding remote branch URLs.
Affected products
- jarrodwatts Claude HUD through 0.0.12
Timeline
- 2026-04-19: disclosed: Initial researcher outreach to maintainer
- 2026-04-22: patched: Fix merged in commit 234d9aa
- 2026-05-18: advisory: CVE published to NVD