Is CVE-2026-47091 exploited in the wild?

No. Junglewise Threat Intelligence has no report of CVE-2026-47091 being exploited in the wild.

How severe is CVE-2026-47091?

Low severity, with a CVSS score of 3.3, published 18 May 2026.

Which products and versions are affected?

Jarrodwatts Claude HUD through 0.0.12.

Is there a fix for CVE-2026-47091?

A patch was published on 2026-04-22: Fixed in commit 234d9aa and PR 487 Junglewise finds every place you run it, drafts the upgrade and applies it once you approve.

How is CVE-2026-47091 attacked?

It is attacked with local access, in a network appliance.

Am I affected by CVE-2026-47091?

Check whether you run Jarrodwatts Claude HUD at an affected version. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.

CVE-2026-47091: jarrodwatts Claude HUD path traversal in transcript_path

CVE-2026-47091 · Severity: low · CVSS 3.3 · Published 2026-05-18

Claude HUD, a terminal-based dashboard for the Claude Code tool, contains a security flaw that allows an attacker to read sensitive files on the host system. By providing a specially crafted file path through the application's input, an attacker can bypass directory restrictions to access data they should not be able to see. Additionally, the application records these unauthorized access attempts in a persistent cache file with weak security settings, potentially leaving a permanent record of the sensitive data on the disk.

Technologies: Jarrodwatts Claude HUD. Vendors: Jarrodwatts.

Quick answers

Is CVE-2026-47091 exploited in the wild?: No. Junglewise Threat Intelligence has no report of CVE-2026-47091 being exploited in the wild.
How severe is CVE-2026-47091?: Low severity, with a CVSS score of 3.3, published 18 May 2026.
Which products and versions are affected?: Jarrodwatts Claude HUD through 0.0.12.
Is there a fix for CVE-2026-47091?: A patch was published on 2026-04-22: Fixed in commit 234d9aa and PR 487 Junglewise finds every place you run it, drafts the upgrade and applies it once you approve.
How is CVE-2026-47091 attacked?: It is attacked with local access, in a network appliance.
Am I affected by CVE-2026-47091?: Check whether you run Jarrodwatts Claude HUD at an affected version. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.

Technical details

A path traversal vulnerability exists in Claude HUD through version 0.0.12 due to insufficient validation of the 'transcript_path' value received via stdin JSON. An attacker with local access can provide a manipulated path (e.g., using '../' sequences) to read any file accessible by the process user. Furthermore, the application writes file metadata (path, size, and mtime) to a persistent cache file with insecure permissions (exceeding 0o600), which allows the record of accessed paths to persist after the process terminates. The vulnerability was addressed in commit 234d9aa by canonicalizing transcript cache paths and enforcing restrictive file permissions.

Affected products

jarrodwatts Claude HUD through 0.0.12

Timeline

2026-04-19: disclosed: Initial report by researcher Katriel Moses
2026-04-22: patched: Fixed in commit 234d9aa and PR 487
2026-05-18: advisory: CVE published to NVD

References

This page as Markdown. Free to reuse under CC BY 4.0 with a link back.