PT-2026-3758 · Anthropic · Claude-Code

Dworken · Published 2026-01-21 · Updated 2026-05-12 · CVE-2026-21852

Positive Technologies (AI Summary)

CVSS v3.1

7.5

High

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Name of the Vulnerable Software and Affected Versions Claude Code versions prior to 2.0.65

Description A flaw in the project-load flow of Claude Code allows malicious repositories to exfiltrate sensitive data, such as Anthropic API keys, before a user confirms trust. An attacker can include a settings file in a repository that modifies the ANTHROPIC BASE URL variable to point to an attacker-controlled endpoint. When the repository is opened, the software reads this configuration and issues API requests immediately, bypassing the trust prompt and potentially leaking the user's API keys.

Recommendations Update to version 2.0.65 or the latest version.

Exploit

Fix

RCE

Insufficiently Protected Credentials

Weakness Enumeration

CWE-522

Related Identifiers

CVE-2026-21852

GHSA-JH7P-QR78-84P7

Affected Products

Claude-Code

References · 73

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/21xxx/CVE-2026-21852.json · Exploit
• https://github.com/anthropics/claude-code/security/advisories/GHSA-jh7p-qr78-84p7 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2026-21852 · Vendor Advisory
• https://osv.dev/vulnerability/GHSA-jh7p-qr78-84p7 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2026-21852 · Security Note
• https://github.com/anthropics/claude-code · Note
• https://twitter.com/mishrak_sanjeev/status/2037921079575093717 · Twitter Post
• https://reddit.com/r/ClaudeAI/comments/1sdq39m/claude_cowork_doesnt_seem_to_want_to_work_within · Reddit Post
• https://twitter.com/c4rniatto/status/2030341041996337388 · Twitter Post
• https://twitter.com/_cvereports/status/2013930451908325815 · Twitter Post
• https://reddit.com/r/CVEWatch/comments/1sk6bxu/top_10_trending_cves_13042026 · Reddit Post
• https://reddit.com/r/HowToHack/comments/1sfluvz/hacking_ai_agents_using_prompt_injection_tool · Reddit Post
• https://twitter.com/cyberbivash/status/2028751099952255371 · Twitter Post
• https://reddit.com/r/TechNadu/comments/1rh7c6t/claude_code_vulnerabilities_allowed_rce_api_key · Reddit Post
• https://twitter.com/grok/status/2027037078723153986 · Twitter Post