İçeriğe atla
Noroxi

Anthropic kayıtları

anthropic üreticisine ait 33 yayımlanmış kayıt.

Araştırmacı profili

KEV’e giren
0 · %0
Silahlaştırılmış
0 · %0
Pre-auth RCE
13
Düzeltme kaydı olan
%100
Yayından KEV’e ortanca
KEV’e giren kayıt yok

Yıllara göre kayıt

  1. 25
  2. 26

Çubuk: toplam · koyu kısım: CISA KEV.

Tekrar eden sınıflar

Bu üreticide en sık görülen zafiyet sınıfları: nereye bakmalı.

CWE

Saldırı profili

Bug bounty kapsamı

Ürünün üreticisi herkese açık bir programda görünüyor. Eşleşme ad üzerinden yapıldı; kapsam metnini programda doğrulayın.

Tüm kayıtlar

33 kayıt
  • CVE-2025-59536
    42Planlayın

    Claude Code's startup trust dialog could lead to Command Execution attack

    YüksekCVSS 8,7Kavram kanıtıEPSS %27

    anthropic · claude code3 Eki 2025

  • CVE-2025-54795
    34İzleyin

    Claude Code echo command allowed bypass of user approval prompt for command execution

    YüksekCVSS 8,7Kavram kanıtıEPSS %1

    anthropic · claude code4 Ağu 2025

  • CVE-2025-66032
    34İzleyin

    Claude Code Command Validation Bypass Allows Arbitrary Code Execution

    YüksekCVSS 8,7İstismar yokEPSS %0

    anthropic · claude code3 Ara 2025

  • CVE-2025-64755
    34İzleyin

    @anthropic-ai/claude-code has Sed Command Validation Bypass that Allows Arbitrary File Writes

    YüksekCVSS 8,7İstismar yokEPSS %0

    anthropic · claude code21 Kas 2025

  • CVE-2025-58764
    34İzleyin

    Claude Code rg command had Command Injection that allowed bypass of user approval prompt for command execution

    YüksekCVSS 8,7İstismar yokEPSS %0

    anthropic · claude code10 Eyl 2025

  • CVE-2025-59041
    34İzleyin

    Claude Code vulnerable to arbitrary code execution caused by maliciously configured git email

    YüksekCVSS 8,7İstismar yokEPSS %0

    anthropic · claude code10 Eyl 2025

  • CVE-2026-44470
    34İzleyin

    Claude Desktop: Local Privilege Escalation via Directory Junction in CoworkVMService

    YüksekCVSS 8,5İstismar yokEPSS %0

    anthropic · claude desktop13 May 2026

  • CVE-2025-54794
    30İzleyin

    Claude Code Research Preview has a Path Restriction Bypass which could allow unauthorized file access

    YüksekCVSS 7,7Kavram kanıtıEPSS %1

    anthropic · claude code4 Ağu 2025

  • CVE-2026-39861
    30İzleyin

    Claude Code: Sandbox Escape via Symlink Following Allows Arbitrary File Write Outside Workspace

    YüksekCVSS 7,7İstismar yokEPSS %0

    anthropic · claude code21 Nis 2026

  • CVE-2026-55607
    30İzleyin

    Claude Code: Sandbox Escape via Git Worktree Path Confusion Allows Unsandboxed Code Execution

    YüksekCVSS 7,7İstismar yokEPSS %0

    anthropic · claude code29 Haz 2026

  • CVE-2026-24887
    30İzleyin

    Claude Code has a Command Injection in find Command Bypasses User Approval Prompt

    YüksekCVSS 7,7İstismar yokEPSS %0

    anthropic · claude code3 Şub 2026

  • CVE-2025-65099
    30İzleyin

    Claude Code vulnerable to command execution prior to startup trust dialog

    YüksekCVSS 7,7Kavram kanıtıEPSS %0

    anthropic · claude code19 Kas 2025

  • CVE-2026-25725
    30İzleyin

    Claude Code Has Sandbox Escape via Persistent Configuration Injection in settings.json

    YüksekCVSS 7,7İstismar yokEPSS %0

    anthropic · claude code6 Şub 2026

  • CVE-2026-24053
    30İzleyin

    Cluade Code has a Path Restriction Bypass via ZSH Clobber which Allows Arbitrary File Writes

    YüksekCVSS 7,7İstismar yokEPSS %0

    anthropic · claude code3 Şub 2026

  • CVE-2026-25722
    30İzleyin

    Claude Code Vulnerable to Command Injection via Directory Change Bypasses Write Protection

    YüksekCVSS 7,7İstismar yokEPSS %0

    anthropic · claude code6 Şub 2026

  • CVE-2026-25723
    30İzleyin

    Claude Code Vulnerable to Command Injection via Piped sed Command Bypasses File Write Restrictions

    YüksekCVSS 7,7İstismar yokEPSS %0

    anthropic · claude code6 Şub 2026

  • CVE-2025-59828
    30İzleyin

    Claude Code Vulnerable to Arbitrary Code Execution via Plugin Autoloading with Specific Yarn Versions

    YüksekCVSS 7,7İstismar yokEPSS %0

    anthropic · claude code24 Eyl 2025

  • CVE-2026-33068
    30İzleyin

    Claude Code has a Workspace Trust Dialog Bypass via Repo-Controlled Settings File

    YüksekCVSS 7,7İstismar yokEPSS %0

    anthropic · claude code20 Mar 2026

  • CVE-2026-40068
    30İzleyin

    Claude Code arbitrary code execution via git worktree commondir trust dialog bypass

    YüksekCVSS 7,7İstismar yokEPSS %0

    anthropic · claude code5 May 2026

  • CVE-2026-21852
    29İzleyin

    Claude Code Leaks Data via Malicious Environment Configuration Before Trust Confirmation

    OrtaCVSS 5,3Kavram kanıtıEPSS %27

    anthropic · claude code21 Oca 2026

  • CVE-2026-44467
    29İzleyin

    Claude Desktop: SSH Host Key Verification Bypass Allows Man-in-the-Middle Attack on Remote Sessions

    YüksekCVSS 7,4İstismar yokEPSS %0

    anthropic · claude desktop13 May 2026

  • CVE-2025-55284
    28İzleyin

    Claude Code's Permissive Default Allowlist Enables Unauthorized File Read and Network Exfiltration in Claude Code

    YüksekCVSS 7,1İstismar yokEPSS %0

    anthropic · claude code15 Ağu 2025

  • CVE-2026-24052
    28İzleyin

    Claude Code has a Domain Validation Bypass which Allows Automatic Requests to Attacker-Controlled Domains

    YüksekCVSS 7,1İstismar yokEPSS %0

    anthropic · claude code3 Şub 2026

  • CVE-2026-34451
    25İzleyin

    Claude SDK for TypeScript: Memory Tool Path Validation Allows Sandbox Escape to Sibling Directories

    OrtaCVSS 6,3İstismar yokEPSS %0

    anthropic · claude sdk for typescript31 Mar 2026

  • CVE-2026-54316
    24İzleyin

    Claude Code: Out-of-Band Data Exfiltration via Pre-Approved HuggingFace Domain in WebFetch

    OrtaCVSS 6,0Kavram kanıtıEPSS %0

    anthropic · claude code23 Haz 2026