CVE-2026-73222

CVE-2026-73222 – Claude Code Templates : The Claude Code Studio server (launched via --studio) in cli-tool/src/sandbox-server.js previously bound to all interfaces on port 3444, allowed cross-origin requests, and required no authentication. The POST /api/execute endpoint forwards the prompt to ex...