PT-2026-30708 · Anthropic · Claude Agent Sdk+1

Francesco Cipollone · Published 2026-04-06 · Updated 2026-04-06 · CVE-2026-35022

Positive Technologies · (AI Summary)

CVSS v3.1

9.8

Critical

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Anthropic Claude Code CLI and Claude Agent SDK (affected versions not specified)

Description Anthropic Claude Code CLI and Claude Agent SDK contain an OS command injection issue in authentication helper execution. Helper configuration values are executed using shell=true without input validation. Attackers who can influence authentication settings can inject shell metacharacters through parameters like apiKeyHelper, awsAuthRefresh, awsCredentialExport, and gcpAuthRefresh to execute arbitrary commands with the privileges of the user or automation environment. This can lead to credential theft and environment variable exfiltration.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

OS Command Injection

Weakness Enumeration

CWE-78

Related Identifiers

CVE-2026-35022

Affected Products

Claude Agent Sdk

Claude Code Cli

References · 7

• 🔥 https://phoenix.security/critical-ci-cd-nightmare-3-command-injection-flaws-in-claude-code-cli-allow-credential-exfiltration · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2026-35022 · Security Note
• https://twitter.com/infoflowcloud/status/2041252630970630161 · Twitter Post
• https://twitter.com/0dayPublishing/status/2041235639069257836 · Twitter Post
• https://twitter.com/CVEnew/status/2041250728606372182 · Twitter Post
• https://vulncheck.com/advisories/anthropic-claude-code-agent-sdk-os-command-injection-via-authentication-helper · Note
• https://twitter.com/CveFindCom/status/2041255356878164020 · Twitter Post