{"id":"CVE-2026-88066","title":"Claude Desktop: Uncontrolled Search Path Enables Arbitrary Code Execution via Malicious Git Executable","summary":"Claude Desktop is Anthropic's desktop application for interacting with Claude. Prior to 1.8089.0, Claude Desktop on Windows invokes git.exe through uv_spawn without an absolute path, allowing Windows search-path resolution to select a ma…","severity":"high","cvss":7.5,"cvssVector":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:A/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N","cvssSource":"cna","cwe":["CWE-427"],"vendor":"anthropics","product":"claude-code","affected":["claude-code < 1.8089.0"],"published":"2026-11-03","updated":"2026-11-03","sourceUpdated":"2026-11-03T20:07:52.495Z","source":"CVEORG","sourceUrl":"https://www.cve.org/CVERecord?id=CVE-2026-88066","references":[{"url":"https://github.com/anthropics/claude-code/security/advisories/GHSA-4p2j-qj3c-6x84","label":"https://github.com/anthropics/claude-code/security/advisories/GHSA-4p2j-qj3c-6x84"}],"tags":["cve.org"],"epss":0.00253,"epssPercentile":0.16881,"ingestedAt":"2026-11-05T20:33:06.429Z","slug":"CVE-2026-88066","body":"## Overview\n\nClaude Desktop is Anthropic's desktop application for interacting with Claude. Prior to 1.8089.0, Claude Desktop on Windows invokes git.exe through uv_spawn without an absolute path, allowing Windows search-path resolution to select a malicious git.exe placed in the opened project's current working directory before the intended system executable. Opening an attacker-controlled or shared repository can therefore execute the substituted program with the user's privileges. This issue is fixed in version 1.8089.0.\n\n## Affected\n\n- `claude-code < 1.8089.0`\n\n## Remediation\n\nRefer to the linked advisories for vendor-supplied fixes and affected version ranges.","depth":"twilight","depthScore":41,"depthScoreParts":{"impact":41.3,"likelihood":0.1,"exploitation":0,"ransomware":0},"changes":[]}