Anthropic's Unreleased AI Model Chains Flaws Into Working Chrome, Safari, Windows and Linux Exploits

An unreleased Anthropic AI model found security flaws in Chrome, Safari, Android, Windows, and Linux and chained them into working proof-of-concept exploits, the company said in its latest report. The exploits were built in the lab after the model was prompted, not seen in any real attack, and...

1shot (>=0.0.3, <=0.0.9), @4via6/relay (>=1.0.0, <=1.1.3) +257 more potentially affected by CVE-2026-88968 via @anthropic-ai/claude-code (>=0.2.14, <=2.1.240)

@anthropic-ai/claude-code NPM version =0.2.14, =0.0.3, =1.0.0, =2.1.0, =0.1.18, =1.0.0, =0.4.0, =1.0.0, =0.2.3, =0.0.1, =0.0.1, =0.0.55, =0.0.69 and more Source cves: CVE-2026-88968 Source advisory: MEND:CVE-2026-88968...

@anthropic-ai/claude-code (>=2.1.116, <=2.1.250), @chude/memory (>=4.0.0, <=4.0.3) +9 more potentially affected by CVE-2026-88968 via @anthropic-ai/claude-code-darwin-arm64 (>=2.1.116, <=2.1.250)

@anthropic-ai/claude-code-darwin-arm64 NPM version =2.1.116, =2.1.116, =4.0.0, =0.8.0, =1.30.1-broken.0, =0.1.44-easy.50, =0.4.1, =2.1.207, =0.1.0, =2.8.0, =2.10.1 Source cves: CVE-2026-88968 Source advisory: MEND:CVE-2026-88968...

@anthropic-ai/claude-code (>=2.1.116, <=2.1.250), @chude/memory (>=4.0.0, <=4.0.3) +9 more potentially affected by CVE-2026-88968 via @anthropic-ai/claude-code-darwin-x64 (>=2.1.116, <=2.1.250)

@anthropic-ai/claude-code-darwin-x64 NPM version =2.1.116, =2.1.116, =4.0.0, =0.8.0, =1.30.1-broken.0, =0.1.44-easy.50, =0.4.1, =2.1.207, =0.1.0, =2.8.0, =2.10.1 Source cves: CVE-2026-88968 Source advisory: MEND:CVE-2026-88968...

@acampkin/mcc (>=2.1.0, <=2.5.0), @applydigital/claude (>=1.0.0, <=1.2.1) +36 more potentially affected by CVE-2026-86063 via @anthropic-ai/claude-code (>=2.0.0, <=2.1.175)

@anthropic-ai/claude-code NPM version =2.0.0, =2.1.0, =1.0.0, =0.0.1, =0.7.5, =0.4.2-beta.2, =19.24.1, =1.0.0-broken, =0.0.1-rc.1, =0.0.1, =0.4.0, =1.0.29, =1.0.81 and more Source cves: CVE-2026-86063 Source advisory: OSV:GHSA-PQ7J-F95F-QFCV...

@acampkin/mcc (>=2.1.0, <=2.5.0), @applydigital/claude (>=1.0.0, <=1.2.1) +36 more potentially affected by CVE-2026-86063 via @anthropic-ai/claude-code (>=2.0.0, <=2.1.175)

@anthropic-ai/claude-code NPM version =2.0.0, =2.1.0, =1.0.0, =0.0.1, =0.7.5, =0.4.2-beta.2, =19.24.1, =1.0.0-broken, =0.0.1-rc.1, =0.0.1, =0.4.0, =1.0.29, =1.0.81 and more Source cves: CVE-2026-86063 Source advisory: SNYK:JS-ANTHROPICAICLAUDECODE-21201048...

Unsafe Dependency Resolution

Overview @anthropic-ai/claude-code is an Use Claude, Anthropic's AI assistant, right from your terminal. Claude can understand your codebase, edit files, run terminal commands, and handle entire workflows for you. Affected versions of this package are vulnerable to Unsafe Dependency Resolution vi...

@acampkin/mcc (>=2.1.0, <=2.5.0), @applydigital/claude (>=1.0.0, <=1.2.1) +36 more potentially affected by CVE-2026-86063 via @anthropic-ai/claude-code (>=2.0.0, <=2.1.175)

@anthropic-ai/claude-code NPM version =2.0.0, =2.1.0, =1.0.0, =0.0.1, =0.7.5, =0.4.2-beta.2, =19.24.1, =1.0.0-broken, =0.0.1-rc.1, =0.0.1, =0.4.0, =1.0.29, =1.0.81 and more Source cves: CVE-2026-86063 Source advisory: GHSA-PQ7J-F95F-QFCV...

1shot (>=0.0.3, <=0.0.9), @4via6/relay (>=1.0.0, <=1.1.3) +253 more potentially affected by CVE-2026-86063 via @anthropic-ai/claude-code (>=0.2.14, <=2.1.175)

@anthropic-ai/claude-code NPM version =0.2.14, =0.0.3, =1.0.0, =2.1.0, =0.1.18, =1.0.0, =0.4.0, =1.0.0, =0.2.3, =0.0.1, =0.0.1, =0.0.55, =0.0.69 and more Source cves: CVE-2026-86063 Source advisory: MEND:CVE-2026-86063...

Directory Traversal

Overview @anthropic-ai/claude-code is an Use Claude, Anthropic's AI assistant, right from your terminal. Claude can understand your codebase, edit files, run terminal commands, and handle entire workflows for you. Affected versions of this package are vulnerable to Directory Traversal via...

@acampkin/mcc (>=2.1.0, <=2.5.0), @applydigital/claude (>=1.0.0, <=1.2.1) +33 more potentially affected by CVE-2026-103435 via @anthropic-ai/claude-code (>=2.0.0, <=2.1.117)

@anthropic-ai/claude-code NPM version =2.0.0, =2.1.0, =1.0.0, =0.0.1, =0.7.5, =0.4.2-beta.2, =19.24.1, =1.0.0-broken, =0.0.1-rc.1, =0.0.1, =0.4.0, =1.0.29, =0.12.0, =0.5.2, =0.10.10 and more Source cves: CVE-2026-103435 Source advisory: SNYK:JS-ANTHROPICAICLAUDECODE-20877545...

@acampkin/mcc (>=2.1.0, <=2.5.0), @applydigital/claude (>=1.0.0, <=1.2.1) +33 more potentially affected by CVE-2026-103435 via @anthropic-ai/claude-code (>=2.0.0, <=2.1.117)

@anthropic-ai/claude-code NPM version =2.0.0, =2.1.0, =1.0.0, =0.0.1, =0.7.5, =0.4.2-beta.2, =19.24.1, =1.0.0-broken, =0.0.1-rc.1, =0.0.1, =0.4.0, =1.0.29, =0.12.0, =0.5.2, =0.10.10 and more Source cves: CVE-2026-103435 Source advisory: MEND:CVE-2026-103435...

PT-2026-107521

@AnthropicAI I just submitted my application and added some of my CVE's that are public: CVE ID or IDs CVE-2026-49257, CVE-2026-76084, CVE-2026-76817, CVE-2026-63192, CVE-2026-63194, CVE-2026-54657, CVE-2026-54683, CVE-2026-55414 . Fingers crossed...

@acampkin/mcc (>=2.1.0, <=2.5.0), @applydigital/claude (>=1.0.0, <=1.2.1) +31 more potentially affected by CVE-2026-103012 via @anthropic-ai/claude-code (>=2.0.69, <=2.1.251)

@anthropic-ai/claude-code NPM version =2.0.69, =2.1.0, =1.0.0, =0.0.1, =4.0.0, =0.7.5, =0.6.0-beta.1, =19.24.1, =1.0.0-broken, =0.0.1, =0.4.0, =1.0.29, =1.0.81 and more Source cves: CVE-2026-103012 Source advisory: SNYK:JS-ANTHROPICAICLAUDECODE-20510289...

Incorrect Behavior Order

Overview @anthropic-ai/claude-code is an Use Claude, Anthropic's AI assistant, right from your terminal. Claude can understand your codebase, edit files, run terminal commands, and handle entire workflows for you. Affected versions of this package are vulnerable to Incorrect Behavior Order via...

@acampkin/mcc (>=2.1.0, <=2.5.0), @applydigital/claude (>=1.0.0, <=1.2.1) +31 more potentially affected by CVE-2026-103012 via @anthropic-ai/claude-code (>=2.0.69, <=2.1.251)

@anthropic-ai/claude-code NPM version =2.0.69, =2.1.0, =1.0.0, =0.0.1, =4.0.0, =0.7.5, =0.6.0-beta.1, =19.24.1, =1.0.0-broken, =0.0.1, =0.4.0, =1.0.29, =1.0.81 and more Source cves: CVE-2026-103012 Source advisory: MEND:CVE-2026-103012...

@applydigital/claude (>=1.0.0, <=1.2.1), @bsklaroff/yaac (>=0.0.1, <=0.0.6) +15 more potentially affected by CVE-2026-55607 via @anthropic-ai/claude-code (>=2.1.39, <=2.1.154)

@anthropic-ai/claude-code NPM version =2.1.39, =1.0.0, =0.0.1, =0.7.5, =0.6.0-beta.3, =1.30.1-broken.0, =0.8.1, =0.8.0, =1.0.33, =1.0.0-dev.1, =2.1.99, =0.0.2, =0.0.4 - feishu-claude-bot 0.1.0 and more Source cves: CVE-2026-55607 Source advisory: GHSA-7835-87Q9-RGVV...

@applydigital/claude (>=1.0.0, <=1.2.1), @bsklaroff/yaac (>=0.0.1, <=0.0.6) +15 more potentially affected by CVE-2026-55607 via @anthropic-ai/claude-code (>=2.1.39, <=2.1.154)

@anthropic-ai/claude-code NPM version =2.1.39, =1.0.0, =0.0.1, =0.7.5, =0.6.0-beta.3, =1.30.1-broken.0, =0.8.1, =0.8.0, =1.0.33, =1.0.0-dev.1, =2.1.99, =0.0.2, =0.0.4 - feishu-claude-bot 0.1.0 and more Source cves: CVE-2026-55607 Source advisory: MEND:CVE-2026-55607...

@applydigital/claude (>=1.0.0, <=1.2.1), @bsklaroff/yaac (>=0.0.1, <=0.0.6) +13 more potentially affected by CVE-2026-46406 via @anthropic-ai/claude-code (>=2.1.63, <=2.1.117)

@anthropic-ai/claude-code NPM version =2.1.63, =1.0.0, =0.0.1, =0.7.5, =0.6.1-beta.1, =1.83.1, =0.8.1, =0.8.0, =1.0.33, =1.0.0-dev.1, =2.1.99, =1.2.2, =1.2.3 Source cves: CVE-2026-46406 Source advisory: MEND:CVE-2026-46406...

@applydigital/claude (>=1.0.0, <=1.2.1), @bsklaroff/yaac (>=0.0.1, <=0.0.6) +13 more potentially affected by CVE-2026-46406 via @anthropic-ai/claude-code (>=2.1.63, <=2.1.117)

@anthropic-ai/claude-code NPM version =2.1.63, =1.0.0, =0.0.1, =0.7.5, =0.6.1-beta.1, =1.83.1, =0.8.1, =0.8.0, =1.0.33, =1.0.0-dev.1, =2.1.99, =1.2.2, =1.2.3 Source cves: CVE-2026-46406 Source advisory: SNYK:JS-ANTHROPICAICLAUDECODE-17660545...