anthropic has 8 CVEs on record between 2025 and 2026. 2 were published in the last 90 days. The median CVSS is 6.5 (medium). None have a confirmed exploitation report. Most affected products: @anthropic-ai/claude-code (2), anthropic (2), claude_code (2).
CVEs per month
Last 12 months, by publish date
- Exploited share
- 0% vs 1% corpus
- Median CVSS
- 6.5
- Publish → KEV
- —
- Last 90 days
- 2 prev 0
Products
- @anthropic-ai/claude-code 2
- anthropic 2
- claude_code 2
- claude 1
- claude_sdk_for_typescript 1
Worst active — by depth score
CVE-2025-59536High· 8.8Claude Code is an agentic coding tool66CVE-2026-22561High· 7.8Uncontrolled search path elements in Anthropic Claude for Windows installer (Claude Setup.exe) versions prior to 1.1.3363 allow local privilege escalation via DLL search-order hijacking43CVE-2026-103435High· 7.7Claude Code validated that a target file path resided within the project working directory at permission-check time, but re-resolved the path at write time without repeating that validation42CVE-2025-59829Medium· 6.5Claude Code is an agentic coding tool36CVE-2026-34451Medium· 5.4Claude SDK for TypeScript provides access to the Claude API from server-side TypeScript or JavaScript applications30
anthropic vulnerabilities
CVEs affecting anthropic, newest first. Open any entry for full detail, references, and exploit status.
8 CVEsRSS
CVE-2026-103435High· 7.7Claude Code validated that a target file path resided within the project working directory at permission-check time, but re-resolved the path at write time without repeating that validation
Claude Code validated that a target file path resided within the project working directory at permission-check time, but re-resolved the path at write time without repeating that validation. This time-of-check to time-of-use (TOCTOU) gap…
CVE-2026-103012Low· 2.0Claude Code selected an API key stored by Claude Code, for example from an earlier `/login` or written directly to its configuration, ahead of the user's valid Claude Enterprise or Team sign-in when fetching the organization's server-man…
Claude Code selected an API key stored by Claude Code, for example from an earlier `/login` or written directly to its configuration, ahead of the user's valid Claude Enterprise or Team sign-in when fetching the organization's server-man…
CVE-2026-34452Medium· 5.3Claude SDK for Python: Memory Tool Path Validation Race Condition Allows Sandbox Escape
Claude SDK for Python: Memory Tool Path Validation Race Condition Allows Sandbox Escape
CVE-2026-34450MediumClaude SDK for Python has Insecure Default File Permissions in Local Filesystem Memory Tool
Claude SDK for Python has Insecure Default File Permissions in Local Filesystem Memory Tool
CVE-2026-34451Medium· 5.4Claude SDK for TypeScript provides access to the Claude API from server-side TypeScript or JavaScript applications
Claude SDK for TypeScript provides access to the Claude API from server-side TypeScript or JavaScript applications. From version 0.79.0 to before version 0.81.0, the local filesystem memory tool in the Anthropic TypeScript SDK validated …
CVE-2026-22561High· 7.8Uncontrolled search path elements in Anthropic Claude for Windows installer (Claude Setup.exe) versions prior to 1.1.3363 allow local privilege escalation via DLL search-order hijacking
Uncontrolled search path elements in Anthropic Claude for Windows installer (Claude Setup.exe) versions prior to 1.1.3363 allow local privilege escalation via DLL search-order hijacking. The installer loads DLLs (e.g., profapi.dll) from …
CVE-2025-59536High· 8.8PoCClaude Code is an agentic coding tool
Claude Code is an agentic coding tool. Versions before 1.0.111 were vulnerable to Code Injection due to a bug in the startup trust dialog implementation. Claude Code could be tricked to execute code contained in a project before the user…
CVE-2025-59829Medium· 6.5Claude Code is an agentic coding tool
Claude Code is an agentic coding tool. Versions below 1.0.120 failed to account for symlinks when checking permission deny rules. If a user explicitly denied Claude Code access to a file and Claude Code had access to a symlink pointing t…