2 matches found
Improper Input Validation
@anthropic-ai/claude-code is vulnerable to Improper Input Validation. The vulnerability is due to an error in command parsing that allows an attacker to bypass the confirmation prompt and trigger execution of untrusted commands by injecting malicious content into a Claude Code context window...
9.8CVSS7.5AI score0.00549EPSS
SaveExploits0References2Affected Software1
PT-2025-37055
Name of the Vulnerable Software and Affected Versions: Claude Code versions prior to 1.0.105 Description: Claude Code is an agentic coding tool. A flaw in command parsing allowed a bypass of the Claude Code confirmation prompt, potentially triggering the execution of untrusted commands...
8.7CVSS6.7AI score0.00549EPSS
SaveExploits0References7
20