# Anthropic Claude Code vulnerabilities Source: https://junglewise.ai/threats/technologies/claude-code Publisher: Junglewise Threat Intelligence, https://junglewise.ai/threats Updated: 11 November 2026, 00:07 UTC. Rebuilt every hour. Data: https://junglewise.ai/threats/technologies/claude-code.json License: CC BY 4.0 with a link back Junglewise Threat Intelligence has tracked 31 vulnerabilities in Anthropic Claude Code: 0 in the last 7 days and 3 in the last 90 days, 3 of them critical and 0 exploited in the wild. The most recent, CVE-2026-88968, was published on 3 November 2026. 2 vulnerabilities in the last four weeks, up 100% on the four before (1). ## Counts - Last 7 days: 0 - Last 30 days: 2 - Last 90 days: 3 - All time: 31 (3 critical, 0 exploited in the wild) ## Latest Anthropic Claude Code vulnerabilities - [CVE-2026-88968: Anthropic Claude Code time-of-check-to-time-of-use in Edit tool](https://junglewise.ai/threats/cve-2026-88968-claude-code-is-an-agentic-coding-tool-prior-to-2-1-251-the-edit) (high, CVSS 4, published 3 Nov 2026) - [CVE-2026-86063: Anthropic Claude Code plugin hash pin bypass in git checkout](https://junglewise.ai/threats/cve-2026-86063-claude-code-plugin-hash-pin-bypass-allows-bypass-of-hash-pinning) (high, CVSS 4, published 15 Oct 2026) - [CVE-2026-103012: Anthropic Claude Code managed settings bypass with stored API key](https://junglewise.ai/threats/cve-2026-103012-claude-code-selected-an-api-key-stored-by-claude-code-for) (info, published 30 Sep 2026) - [CVE-2026-55607: Anthropic Claude Code sandbox escape via git worktree path confusion](https://junglewise.ai/threats/cve-2026-55607-anthropic-claude-code-sandbox-escape-via-git-worktree-path) (high, CVSS 4, published 29 Jun 2026) - [CVE-2026-46406: Anthropic Claude Code insecure temporary file in copy command](https://junglewise.ai/threats/cve-2026-46406-anthropic-claude-code-insecure-temporary-file-in-copy-command) (medium, CVSS 4, published 29 Jun 2026) - [CVE-2026-54316: Anthropic Claude Code data exfiltration via HuggingFace allowlist bypass](https://junglewise.ai/threats/cve-2026-54316-anthropic-claude-code-data-exfiltration-via-huggingface-allowlist) (medium, CVSS 3.1, published 23 Jun 2026) - [CVE-2026-40068: Anthropic Claude Code trust bypass via Git worktree spoofing](https://junglewise.ai/threats/cve-2026-40068-anthropic-claude-code-trust-bypass-via-git-worktree-spoofing) (high, CVSS 8.8, published 5 May 2026) - [CVE-2026-39861: Claude Code: Sandbox Escape via Symlink Following Allows Arbitrary File Write Outside Workspace](https://junglewise.ai/threats/cve-2026-39861-claude-code-sandbox-escape-via-symlink-following-allows-arbitrary) (critical, CVSS 10, published 21 Apr 2026) - [CVE-2026-35603: Claude Code: Insecure System-Wide Configuration Loading Enables Local Privilege Escalation on Windows](https://junglewise.ai/threats/cve-2026-35603-claude-code-insecure-system-wide-configuration-loading-enables) (high, CVSS 7.3, published 17 Apr 2026) - [CVE-2026-33068: Anthropic Claude Code workspace trust dialog bypass via settings file](https://junglewise.ai/threats/cve-2026-33068-anthropic-claude-code-workspace-trust-dialog-bypass-via-settings) (medium, CVSS 4, published 19 Mar 2026) - [CVE-2026-25725: Anthropic Claude Code sandbox escape via configuration injection](https://junglewise.ai/threats/cve-2026-25725-anthropic-claude-code-sandbox-escape-via-configuration-injection) (medium, CVSS 4, published 6 Feb 2026) - [CVE-2026-25724: Claude Code permission bypass through symbolic links](https://junglewise.ai/threats/cve-2026-25724-claude-code-permission-bypass-through-symbolic-links) (medium, CVSS 4, published 6 Feb 2026) - [CVE-2026-25723: Anthropic Claude Code command injection via piped sed](https://junglewise.ai/threats/cve-2026-25723-anthropic-claude-code-command-injection-via-piped-sed) (medium, CVSS 4, published 6 Feb 2026) - [CVE-2026-25722: Anthropic Claude Code command injection via directory traversal](https://junglewise.ai/threats/cve-2026-25722-anthropic-claude-code-command-injection-via-directory-traversal) (medium, CVSS 4, published 6 Feb 2026) - [CVE-2026-24887: Anthropic Claude Code command injection in find command](https://junglewise.ai/threats/cve-2026-24887-anthropic-claude-code-command-injection-in-find-command) (medium, CVSS 4, published 3 Feb 2026) - [CVE-2026-24053: Anthropic Claude Code path restriction bypass via ZSH clobber](https://junglewise.ai/threats/cve-2026-24053-anthropic-claude-code-path-restriction-bypass-via-zsh-clobber) (medium, CVSS 4, published 3 Feb 2026) - [CVE-2026-24052: Anthropic Claude Code domain validation bypass in WebFetch](https://junglewise.ai/threats/cve-2026-24052-anthropic-claude-code-domain-validation-bypass-in-webfetch) (medium, CVSS 4, published 3 Feb 2026) - [CVE-2026-21852: Anthropic Claude Code credential leakage via malicious environment configuration](https://junglewise.ai/threats/cve-2026-21852-anthropic-claude-code-credential-leakage-via-malicious) (medium, CVSS 4, published 21 Jan 2026) - [CVE-2025-66032: Anthropic Claude Code command validation bypass](https://junglewise.ai/threats/cve-2025-66032-anthropic-claude-code-command-validation-bypass) (medium, CVSS 4, published 3 Dec 2025) - [CVE-2025-64755: Anthropic claude-code sed command validation bypass](https://junglewise.ai/threats/cve-2025-64755-anthropic-claude-code-sed-command-validation-bypass) (critical, CVSS 9.8, published 21 Nov 2025) - [CVE-2025-65099: Anthropic Claude Code command execution prior to trust dialog](https://junglewise.ai/threats/cve-2025-65099-anthropic-claude-code-command-execution-prior-to-trust-dialog) (critical, CVSS 9.8, published 19 Nov 2025) - [CVE-2025-59829: Anthropic Claude Code permission bypass via symlink](https://junglewise.ai/threats/cve-2025-59829-anthropic-claude-code-permission-bypass-via-symlink) (medium, CVSS 4, published 3 Oct 2025) - [CVE-2025-59536: Anthropic Claude Code command execution before trust dialog](https://junglewise.ai/threats/cve-2025-59536-anthropic-claude-code-command-execution-before-trust-dialog) (medium, CVSS 4, published 3 Oct 2025) - [CVE-2025-59828: Anthropic Claude Code arbitrary code execution via Yarn plugin autoloading](https://junglewise.ai/threats/cve-2025-59828-anthropic-claude-code-arbitrary-code-execution-via-yarn-plugin) (medium, CVSS 4, published 24 Sep 2025) - [CVE-2025-59041: Anthropic Claude Code arbitrary code execution in git configuration](https://junglewise.ai/threats/cve-2025-59041-anthropic-claude-code-arbitrary-code-execution-in-git) (medium, CVSS 4, published 10 Sep 2025) ## Most severe Anthropic Claude Code vulnerabilities - [CVE-2026-39861: Claude Code: Sandbox Escape via Symlink Following Allows Arbitrary File Write Outside Workspace](https://junglewise.ai/threats/cve-2026-39861-claude-code-sandbox-escape-via-symlink-following-allows-arbitrary) (critical, CVSS 10, published 21 Apr 2026) - [CVE-2025-64755: Anthropic claude-code sed command validation bypass](https://junglewise.ai/threats/cve-2025-64755-anthropic-claude-code-sed-command-validation-bypass) (critical, CVSS 9.8, published 21 Nov 2025) - [CVE-2025-65099: Anthropic Claude Code command execution prior to trust dialog](https://junglewise.ai/threats/cve-2025-65099-anthropic-claude-code-command-execution-prior-to-trust-dialog) (critical, CVSS 9.8, published 19 Nov 2025) - [CVE-2026-40068: Anthropic Claude Code trust bypass via Git worktree spoofing](https://junglewise.ai/threats/cve-2026-40068-anthropic-claude-code-trust-bypass-via-git-worktree-spoofing) (high, CVSS 8.8, published 5 May 2026) - [CVE-2026-35603: Claude Code: Insecure System-Wide Configuration Loading Enables Local Privilege Escalation on Windows](https://junglewise.ai/threats/cve-2026-35603-claude-code-insecure-system-wide-configuration-loading-enables) (high, CVSS 7.3, published 17 Apr 2026) - [CVE-2026-55607: Anthropic Claude Code sandbox escape via git worktree path confusion](https://junglewise.ai/threats/cve-2026-55607-anthropic-claude-code-sandbox-escape-via-git-worktree-path) (high, CVSS 4, published 29 Jun 2026) - [CVE-2026-88968: Anthropic Claude Code time-of-check-to-time-of-use in Edit tool](https://junglewise.ai/threats/cve-2026-88968-claude-code-is-an-agentic-coding-tool-prior-to-2-1-251-the-edit) (high, CVSS 4, published 3 Nov 2026) - [CVE-2026-86063: Anthropic Claude Code plugin hash pin bypass in git checkout](https://junglewise.ai/threats/cve-2026-86063-claude-code-plugin-hash-pin-bypass-allows-bypass-of-hash-pinning) (high, CVSS 4, published 15 Oct 2026) - [CVE-2026-21852: Anthropic Claude Code credential leakage via malicious environment configuration](https://junglewise.ai/threats/cve-2026-21852-anthropic-claude-code-credential-leakage-via-malicious) (medium, CVSS 4, published 21 Jan 2026) - [CVE-2025-59536: Anthropic Claude Code command execution before trust dialog](https://junglewise.ai/threats/cve-2025-59536-anthropic-claude-code-command-execution-before-trust-dialog) (medium, CVSS 4, published 3 Oct 2025) ## Vulnerabilities per week 2 vulnerabilities in the last four weeks, up 100% on the four before (1). | Week of | Vulns | Critical | Exploited | | --- | --- | --- | --- | | 17 Aug 2026 | 0 | 0 | 0 | | 24 Aug 2026 | 0 | 0 | 0 | | 31 Aug 2026 | 0 | 0 | 0 | | 7 Sep 2026 | 0 | 0 | 0 | | 14 Sep 2026 | 0 | 0 | 0 | | 21 Sep 2026 | 0 | 0 | 0 | | 28 Sep 2026 | 1 | 0 | 0 | | 5 Oct 2026 | 0 | 0 | 0 | | 12 Oct 2026 | 1 | 0 | 0 | | 19 Oct 2026 | 0 | 0 | 0 | | 26 Oct 2026 | 0 | 0 | 0 | | 2 Nov 2026 | 1 | 0 | 0 | | 9 Nov 2026 | 0 | 0 | 0 | ## Other Anthropic technologies - [Anthropic Model Context Protocol](https://junglewise.ai/threats/technologies/model-context-protocol): 11 vulnerabilities - [Anthropic Claude Desktop](https://junglewise.ai/threats/technologies/claude-desktop): 6 vulnerabilities - [Anthropic Model Context Protocol SDK (TypeScript)](https://junglewise.ai/threats/technologies/model-context-protocol-sdk-typescript): 5 vulnerabilities - [Anthropic @Modelcontextprotocol/Sdk](https://junglewise.ai/threats/technologies/anthropic-modelcontextprotocol-sdk): 4 vulnerabilities - [Anthropic Claude Agent SDK](https://junglewise.ai/threats/technologies/claude-agent-sdk): 4 vulnerabilities - [Anthropic Model Context Protocol Python SDK](https://junglewise.ai/threats/technologies/anthropic-model-context-protocol-python-sdk): 3 vulnerabilities - [Anthropic Claude Code CLI](https://junglewise.ai/threats/technologies/claude-code-cli): 3 vulnerabilities ## Sources NVD, GitHub Security Advisories, OSV, the CISA Known Exploited Vulnerabilities catalog, FIRST EPSS and vendor advisories. Rebuilt every hour. Cite as: Junglewise Threat Intelligence, "Anthropic Claude Code vulnerabilities", https://junglewise.ai/threats/technologies/claude-code, 11 November 2026.