---
id: CVE-2026-88066
title: >-
  Claude Desktop: Uncontrolled Search Path Enables Arbitrary Code Execution via
  Malicious Git Executable
summary: >-
  Claude Desktop is Anthropic's desktop application for interacting with Claude.
  Prior to 1.8089.0, Claude Desktop on Windows invokes git.exe through uv_spawn
  without an absolute path, allowing Windows search-path resolution to select a
  ma…
severity: high
cvss: 7.5
cvssVector: 'CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:A/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N'
cvssSource: cna
cwe:
  - CWE-427
vendor: anthropics
product: claude-code
affected:
  - claude-code < 1.8089.0
published: '2026-11-03'
updated: '2026-11-03'
sourceUpdated: '2026-11-03T20:07:52.495Z'
source: CVEORG
sourceUrl: 'https://www.cve.org/CVERecord?id=CVE-2026-88066'
references:
  - url: >-
      https://github.com/anthropics/claude-code/security/advisories/GHSA-4p2j-qj3c-6x84
    label: >-
      https://github.com/anthropics/claude-code/security/advisories/GHSA-4p2j-qj3c-6x84
tags:
  - cve.org
epss: 0.00253
epssPercentile: 0.16881
ingestedAt: '2026-11-05T20:33:06.429Z'
---

## Overview

Claude Desktop is Anthropic's desktop application for interacting with Claude. Prior to 1.8089.0, Claude Desktop on Windows invokes git.exe through uv_spawn without an absolute path, allowing Windows search-path resolution to select a malicious git.exe placed in the opened project's current working directory before the intended system executable. Opening an attacker-controlled or shared repository can therefore execute the substituted program with the user's privileges. This issue is fixed in version 1.8089.0.

## Affected

- `claude-code < 1.8089.0`

## Remediation

Refer to the linked advisories for vendor-supplied fixes and affected version ranges.