Lucene search
+L

1 matches found

Github Security Blog
Github Security Blog
•added 2026/07/01 6:41 p.m.•29 views

Cortex has Untrusted Project Bootstrap Code Execution via `CLAUDE_PROJECT_DIR`

Untrusted Project Bootstrap Code Execution via CLAUDEPROJECTDIR Summary The Cortex MCP server neuro-cortex-memory treats the CLAUDEPROJECTDIR environment variable — automatically set by Claude Code to the currently open project directory — as a trusted Cortex developer checkout. When the...

8.5CVSS6.9AI score0.0016EPSS
SaveExploits0References3Affected Software1
Rows per page
Query Builder