Lucene search
K

8 matches found

EUVD
EUVD
added 2026/04/16 9:31 p.m.2 views

EUVD-2026-23292

Improper validation of bash commands in Snowflake Cortex Code CLI versions prior to 1.0.25 allowed subsequent commands to execute outside the sandbox. An attacker could exploit this by embedding specially crafted commands in untrusted content, such as a malicious repository, causing the CLI agent...

8.3CVSS6.2AI score0.00358EPSS
Exploits0References3
Vulnrichment
Vulnrichment
added 2026/04/16 6:43 p.m.4 views

CVE-2026-6442 Improper Command Detection Logic Allows RCE in Cortex Code Command-Line Interface

Improper validation of bash commands in Snowflake Cortex Code CLI versions prior to 1.0.25 allowed subsequent commands to execute outside the sandbox. An attacker could exploit this by embedding specially crafted commands in untrusted content, such as a malicious repository, causing the CLI agent...

8.3CVSS6.2AI score0.00358EPSS
Exploits0References2
ATTACKERKB
ATTACKERKB
added 2026/04/16 6:43 p.m.6 views

CVE-2026-6442

Improper validation of bash commands in Snowflake Cortex Code CLI versions prior to 1.0.25 allowed subsequent commands to execute outside the sandbox. An attacker could exploit this by embedding specially crafted commands in untrusted content, such as a malicious repository, causing the CLI agent...

8.3CVSS6.2AI score0.00358EPSS
Exploits0References3Affected Software1
CVE
CVE
added 2026/04/16 6:43 p.m.17 views

CVE-2026-6442

CVE-2026-6442 concerns Snowflake Cortex Code CLI prior to version 1.0.25, where improper validation of bash commands allows embedding crafted content to cause the CLI agent to execute arbitrary code outside the sandbox. The NVD/CVE records describe this as a local RCE risk with non-deterministic ...

8.3CVSS6.2AI score0.00358EPSS
Exploits0References2
ATTACKERKB
ATTACKERKB
added 2026/04/06 6:59 p.m.2 views

CVE-2026-35021

This CVE ID has been rejected by its CVE Numbering Authority CNA. It was determined that the affected code path cannot be triggered through normal usage of Claude Code...

5.8AI score0.00041EPSS
Exploits0References3
CNNVD
CNNVD
added 2026/04/06 12:0 a.m.17 views

Claude Code CLI和Claude Agent SDK 操作系统命令注入漏洞

Claude Code CLI and Claude Agent SDK are both open-source products developed by Anthropic. Claude Code CLI is a command-line AI coding assistant tool. Claude Agent SDK is a developer toolkit for AI coding assistants. Both Claude Code CLI and Claude Agent SDK have operating system command injectio...

6.2AI score0.00596EPSS
Exploits0References3
CNNVD
CNNVD
added 2026/04/06 12:0 a.m.6 views

Claude Code CLI和Claude Agent SDK 操作系统命令注入漏洞

Claude Code CLI and Claude Agent SDK are both open-source products developed by Anthropic. Claude Code CLI is a command-line AI coding assistant tool. Claude Agent SDK is a developer toolkit for AI coding assistants. Both Claude Code CLI and Claude Agent SDK have operating system command injectio...

6.1AI score0.00114EPSS
Exploits0References3
GithubExploit
GithubExploit
added 2026/03/08 2:13 p.m.131 views

poc-opencode-dev-agents

opencode-dev-agents Agentes AI y comandos personalizados pa...

5.8AI score
Exploits0
Rows per page
Query Builder