Anthropic Claude Code < 2.1.179 Plugin Hash Pinning Bypass (CVE-2026-86063)

The version of Anthropic Claude Code installed on the remote host is prior to 2.1.179. It is, therefore, affected by a hash pinning bypass vulnerability: - The plugin install flow in Claude Code checked out a marketplace's pinned commit SHA using git checkout without verifying that the resulting...