CVE-2025-15060

The CVE-2025-15060 vulnerability affects claude-hovercraft through the executeClaudeCode method, enabling Command Injection and Remote Code Execution. The flaw arises from insufficient validation of a user-supplied string before executing a system call, allowing an attacker to run arbitrary code ...