CVE-2026-55607High· 7.1▾ TwilightA flaw was found in Claude Code, an agentic coding tool, in its handling of worktrees. This vulnerability allowed the creation of specially named worktrees and navigation outside of the intended secure environment, leading to what is known…
▾ Twilight zone — High severity, or a signal on a lesser flaw
impact 39.1 · likelihood 0.1 · exploitation 0
Need a working PoC? Pro members can cast a request and our team develops one — it lands right here.
Exploit-prediction probability, daily snapshots since Jul 31.
Disclosure to exploitation, from the record and what we observed since indexing it.
Disclosed via CSAF
0.6%
0.6% → 0.7%
Last analysed / modified upstream
— → 7.1
A flaw was found in Claude Code, an agentic coding tool, in its handling of worktrees. This vulnerability allowed the creation of specially named worktrees and navigation outside of the intended secure environment, leading to what is known as a 'git directory confusion attack'. By manipulating symbolic links and how git monitors file system changes, an attacker could overwrite important user files, potentially leading to unauthorized code execution on the user's system. This attack requires a user to interact with a malicious code repository.
Claude Code: @anthropic-ai/claude-code: Claude Code: Arbitrary code execution through git directory confusion — rated Important by Red Hat. Released 2026-06-29, updated 2026-10-15.
Affected:
No fix planned:
Affected
Workarounds / mitigations:
Affected packages:
@anthropic-ai/claude-code >= 2.1.38, < 2.1.163Patched in:
@anthropic-ai/claude-code 2.1.163Field changes observed since this record was first indexed.
Connected by shared product, vendor, weakness, or advisory.
CVE-2026-0846High· 7.5nltk: NLTK: Arbitrary file read via improper path validation in `filestring()` function (CVE-2026-0846)
CVE-2026-0847High· 7.5nltk: NLTK: Arbitrary file read via path traversal vulnerability (CVE-2026-0847)
CVE-2025-1753High· 7.8llama-index: Command Injection in LLama-Index CLI in run-llama/llama_index (CVE-2025-1753)
CVE-2026-55888High· 8.2xdg-desktop-portal: xdg-desktop-portal: Unauthorized host file access via unvalidated FileChooser filenames (CVE-2026-55888)
CVE-2026-115378Medium· 5.8github.com/lxc/incus: Incus: Arbitrary file write on the host via recursive file pull (CVE-2026-115378)
CVE-2026-115354Medium· 6.5mistune: mistune: Information disclosure via path traversal in Include directive (CVE-2026-115354)