26 matches found
CVE-2026-73222
creationtimestamp| type| source ---|---|--- 2026-09-03 20:35:04+00:00| published-proof-of-concept| https://github.com/davila7/claude-code-templates/security/advisories/GHSA-79wm-x847-7cvg...
Claude Code Templates: Unauthenticated OS command injection (RCE) in Claude Code Studio server (--studio)
Summary npx claude-code-templates --studio launches "Claude Code Studio", an Express HTTP server cli-tool/src/sandbox-server.js, default port 3444 that binds to all interfaces 0.0.0.0, sets Access-Control-Allow-Origin: , and requires no authentication. Two POST endpoints pass attacker-controlled...
NPM: Claude Code Templates: Unauthenticated OS command injection (RCE) in Claude Code Studio server (--studio)
NPM: Claude Code Templates: Unauthenticated OS command injection RCE in Claude Code Studio server --studio vulnerability discovered by ? in WordPress Npm claude-code-templates versions = 1.29.2...
GHSA-79WM-X847-7CVG Claude Code Templates: Unauthenticated OS command injection (RCE) in Claude Code Studio server (--studio)
Summary npx claude-code-templates --studio launches "Claude Code Studio", an Express HTTP server cli-tool/src/sandbox-server.js, default port 3444 that binds to all interfaces 0.0.0.0, sets Access-Control-Allow-Origin: , and requires no authentication. Two POST endpoints pass attacker-controlled...
CVE-2026-73222 Claude Code Templates: Unauthenticated OS command injection (RCE) in Claude Code Studio server (--studio)
Claude Code Templates is a CLI tool for configuring and monitoring Claude Code. Prior to 1.29.4, the Claude Code Studio server launched by the --studio option in cli-tool/src/sandbox-server.js binds to all interfaces on port 3444, permits cross-origin requests, and requires no authentication. The...
CVE-2026-73222
Claude Code Templates is a CLI tool for configuring and monitoring Claude Code. Prior to 1.29.4, the Claude Code Studio server launched by the --studio option in cli-tool/src/sandbox-server.js binds to all interfaces on port 3444, permits cross-origin requests, and requires no authentication. The...
CVE-2026-73222 Claude Code Templates: Unauthenticated OS command injection (RCE) in Claude Code Studio server (--studio)
Claude Code Templates is a CLI tool for configuring and monitoring Claude Code. Prior to 1.29.4, the Claude Code Studio server launched by the --studio option in cli-tool/src/sandbox-server.js binds to all interfaces on port 3444, permits cross-origin requests, and requires no authentication. The...
CVE-2026-73222
CVE-2026-73222 – Claude Code Templates : The Claude Code Studio server (launched via --studio) in cli-tool/src/sandbox-server.js previously bound to all interfaces on port 3444, allowed cross-origin requests, and required no authentication. The POST /api/execute endpoint forwards the prompt to ex...
PT-2026-70844
Name of the Vulnerable Software and Affected Versions Claude Code Templates versions prior to 1.29.4 Description The Claude Code Studio server, launched via the --studio option, binds to all interfaces on port 3444, allows cross-origin requests, and lacks authentication. The POST /api/execute...
CVE-2026-73222: Improper Neutralization of Special Elements used in an OS Command
Claude Code Templates is a CLI tool for configuring and monitoring Claude Code. Prior to 1.29.4, the Claude Code Studio server launched by the --studio option in cli-tool/src/sandbox-server.js binds to all interfaces on port 3444, permits cross-origin requests, and requires no authentication. The...
PT-2026-21846
Name of the Vulnerable Software and Affected Versions InvenTree versions prior to 1.2.3 Description InvenTree is an Open Source Inventory Management System. Prior to version 1.2.3, insecure server-side templates can be hijacked to expose secure information to the client. When generating custom...
CVE-2024-43405
Nuclei is a vulnerability scanner powered by YAML based templates. Starting in version 3.0.0 and prior to version 3.3.2, a vulnerability in Nuclei's template signature verification system could allow an attacker to bypass the signature check and possibly execute malicious code via custom code...
GHSA-7H5P-MMPP-HGMM Nuclei Template Signature Verification Bypass
Summary A vulnerability has been identified in Nuclei's template signature verification system that could allow an attacker to bypass the signature check and possibly execute malicious code via custom code template. Affected Component The vulnerability is present in the template signature...
OS Command Injection
Nuclei is vulnerable to OS Command Injection. The vulnerability is due to the -code option in code templates, allowing users to edit and execute workflow files in some web applications, leading to arbitrary command execution...
PT-2024-28959 · Nuclei · Nuclei
Name of the Vulnerable Software and Affected Versions: Nuclei versions prior to 3.3.0 Description: A way to execute code templates without the -code option and signature has been discovered in Nuclei. This issue affects some web applications that inherit from Nuclei and allow users to edit and...
Arbitrary Code Execution
github.com/projectdiscovery/nuclei is vulnerable to Arbitrary Code Execution. The vulnerability is due to improper validation of signed workflows within the parseWorkflowTemplate function in workflows.go, which allows the execution of unsigned code templates through workflows...
CVE-2024-27920 Unsigned code template execution through workflows in projectdiscovery/nuclei
projectdiscovery/nuclei is a fast and customisable vulnerability scanner based on simple YAML based DSL. A significant security oversight was identified in Nuclei v3, involving the execution of unsigned code templates through workflows. This vulnerability specifically affects users utilizing cust...
CVE-2024-27920: Improper Neutralization of Special Elements used in an OS Command
projectdiscovery/nuclei is a fast and customisable vulnerability scanner based on simple YAML based DSL. A significant security oversight was identified in Nuclei v3, involving the execution of unsigned code templates through workflows. This vulnerability specifically affects users utilizing cust...
