Anthropic Claude Code 0.2.54 < 2.1.163 Data Exfiltration (CVE-2026-54316)
The version of Anthropic Claude Code installed on the remote host is 0.2.54 prior to 2.1.163. It is, therefore, affected by a data exfiltration vulnerability. - Because the hostname huggingface.co was pre-approved as a bare hostname for the WebFetch tool, any path on that domain including...