CVE-2026-54316

Katalog CVE

CVSS 9.1 · Critical EPSS 0,52%

Kerentanan Permissive List of Allowed Inputs pada anthropic claude code. Skor CVSS 3.1 9.1 (Critical) menurut NVD.

Deskripsi (NVD)

Claude Code is an agentic coding tool. From 0.2.54 until 2.1.163, because the hostname huggingface.co was pre-approved as a bare hostname for the WebFetch tool, any path on that domain—including attacker-controlled model repositories—was auto-approved without a permission prompt or being subject to --allowedTools restrictions. An attacker able to inject untrusted content into a Claude Code context could direct it to issue WebFetch requests against attacker-controlled repository files (e.g. /resolve/main/config.json), which HuggingFace counts as downloads server-side, creating a covert out-of-band channel for encoding and exfiltrating data Claude can access such as files, environment variables, or command output. Reliably exploiting this required the ability to add untrusted content into a Claude Code context window. This vulnerability is fixed in 2.1.163.

Rincian

Terbit di NVD

23 Juni 2026

Terakhir diubah

29 Juni 2026

Status NVD

Analyzed

CVSS 3.1

9.1 (Critical), sumber NVD
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N · uraikan di kalkulator

Jenis kelemahan (CWE)

CWE-183: Permissive List of Allowed Inputs
CWE-200: Exposure of Sensitive Information to an Unauthorized Actor
CWE-515: Covert Storage Channel

EPSS (30 hari)

0,52% peluang dieksploitasi; lebih tinggi dari 42,5% CVE lain

Produk dan versi terdampak

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

• https://github.com/anthropics/claude-code/security/advisories/GHSA-fg94-h982-f3mm advisory pihak ketiga