# CVE-2026-47090: Claude HUD terminal injection in OSC 8 hyperlinks

Source: https://junglewise.ai/threats/cve-2026-47090-claude-hud-terminal-injection-in-osc-8-hyperlinks  
Publisher: Junglewise Threat Intelligence, https://junglewise.ai/threats  
Published: 2026-05-18. Updated: 2026-05-18  
License: CC BY 4.0 with a link back

CVE-2026-47090 · Severity: medium · CVSS 4.6 · Published 2026-05-18

Claude HUD is a terminal-based dashboard for monitoring Claude Code sessions. A vulnerability in how it handles project metadata allows an attacker to inject malicious terminal commands or escape sequences. If a user interacts with a specially crafted project directory or branch name, an attacker could manipulate the terminal display, capture clipboard data, or trigger unauthorized web requests, potentially compromising the user's local environment.

Technologies: [Jarrodwatts Claude HUD](https://junglewise.ai/threats/technologies/claude-hud). Vendors: [Jarrodwatts](https://junglewise.ai/threats/vendors/jarrodwatts).

## Quick answers

**Is CVE-2026-47090 exploited in the wild?** No. Junglewise Threat Intelligence has no report of CVE-2026-47090 being exploited in the wild.

**How severe is CVE-2026-47090?** Medium severity, with a CVSS score of 4.6, published 18 May 2026.

**Which products and versions are affected?** Jarrodwatts Claude HUD through 0.0.12.

**Is there a fix for CVE-2026-47090?** A patch was published on 2026-04-22: Fix merged in commit 234d9aa Junglewise finds every place you run it, drafts the upgrade and applies it once you approve.

**How is CVE-2026-47090 attacked?** It is attacked with local access, in a network appliance.

**Am I affected by CVE-2026-47090?** Check whether you run Jarrodwatts Claude HUD at an affected version. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.

## Technical details

The vulnerability exists in the `hyperlink()` function within `project.ts`, which constructs OSC 8 terminal hyperlink escape sequences using raw `cwd` and `branchUrl` values. Because the application fails to strip control characters or properly encode these values, an attacker can embed ESC+backslash sequences to terminate the OSC 8 sequence early and inject arbitrary ANSI codes. This can be exploited to perform OSC 52 clipboard writes, change text colors, or forge terminal prompts. Additionally, clicking a malicious branch URL can trigger outbound HTTP requests to attacker-controlled servers. The issue was addressed in commit 234d9aa by sanitizing hyperlink rendering and encoding remote branch URLs.

## Affected products

- jarrodwatts Claude HUD through 0.0.12

## Timeline

- 2026-04-19: disclosed: Initial researcher outreach to maintainer
- 2026-04-22: patched: Fix merged in commit 234d9aa
- 2026-05-18: advisory: CVE published to NVD

## References

- [https://github.com/jarrodwatts/claude-hud/commit/234d9aad919b51326a43bcf90b45ae35c23afc30](https://github.com/jarrodwatts/claude-hud/commit/234d9aad919b51326a43bcf90b45ae35c23afc30)
- [https://github.com/jarrodwatts/claude-hud/issues/485](https://github.com/jarrodwatts/claude-hud/issues/485)
- [https://github.com/jarrodwatts/claude-hud/pull/487](https://github.com/jarrodwatts/claude-hud/pull/487)
- [https://www.vulncheck.com/advisories/claude-hud-terminal-injection-via-osc-8-hyperlinks](https://www.vulncheck.com/advisories/claude-hud-terminal-injection-via-osc-8-hyperlinks)

## Related threats

- [jarrodwatts Claude HUD command injection via COMSPEC environment variable](https://junglewise.ai/threats/cve-2026-47092-jarrodwatts-claude-hud-command-injection-via-comspec-environment)
- [jarrodwatts Claude HUD path traversal in transcript_path](https://junglewise.ai/threats/cve-2026-47091-jarrodwatts-claude-hud-path-traversal-in-transcript-path)