CVE-2026-47090Medium· 4.6▾ SunlitClaude HUD through 0.0.12, patched in commit 234d9aa, constructs OSC 8 terminal hyperlink escape sequences using raw cwd and branchUrl values without stripping control characters or encoding embedded values, allowing attackers to inject …
▾ Sunlit zone — Low / medium · no exploitation signal
impact 25.3 · likelihood 0 · exploitation 0
Need a working PoC? Pro members can cast a request and our team develops one — it lands right here.
Stakeholder-Specific Vulnerability Categorization from CISA's ADP record at CVE.org: whether exploitation is observed, whether an attack can be automated, and how much of the system is at stake. The CVSS score shown above comes from the assigning CNA record, not NVD.
Disclosure to exploitation, from the record and what we observed since indexing it.
Disclosed via CVEORG
Last analysed / modified upstream
0.1%
Claude HUD through 0.0.12, patched in commit 234d9aa, constructs OSC 8 terminal hyperlink escape sequences using raw cwd and branchUrl values without stripping control characters or encoding embedded values, allowing attackers to inject arbitrary ANSI codes into terminal sessions. Attackers can embed ESC+backslash sequences in the current working directory or branch URL to execute malicious ANSI codes including text color changes, forged prompts, and OSC 52 clipboard writes, or trigger outbound HTTP requests to attacker-controlled remotes when hyperlinks are clicked.
claude-hud <= 0.0.12Refer to the linked advisories for vendor-supplied fixes and affected version ranges.
Connected by shared product, vendor, weakness, or advisory.
CVE-2026-47091Low· 3.3Claude HUD 0.0.12 Path Traversal via transcript_path
CVE-2026-47092High· 7.8Claude HUD 0.0.12 Arbitrary Command Execution via COMSPEC Environment Variable
CVE-2026-40505Low· 3.3MuPDF < 1.27 mutool ANSI Injection via Metadata
CVE-2026-123847Medium· 5.3In JetBrains IntelliJ IDEA before 2026.3 command execution was possible via control characters in terminal command completion
CVE-2026-121547Low· 2.2dysk before 3.8.2 Terminal Escape Sequence Injection via Mount Metadata
CVE-2026-55467Low· 2.5OpenPrinting CUPS is an open source printing system for Linux and other Unix-like operating systems