PT-2026-38323 · Anthropic · Claude Desktop

Published 2026-05-06 · Updated 2026-05-13 · CVE-2026-44470

Positive Technologies (AI Summary)

CVSS v4.0

8.5

High

Base vector

AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N

Name of the Vulnerable Software and Affected Versions Claude Desktop for Windows versions prior to 1.3834.0

Description The CoworkVMService component runs as SYSTEM and fails to validate if the VM bundle directory is a legitimate directory or an NTFS directory junction before file creation. A local non-elevated user can replace the writable VM bundle directory with a junction pointing to a location of their choice, forcing the service to create a SYSTEM-owned file in an arbitrary directory. This flaw can be exploited to achieve local privilege escalation, which is the process of gaining higher-level permissions on a system than those originally assigned to the user.

Recommendations Update to version 1.3834.0.

Fix

LPE

Link Following

Improper Privilege Management

Weakness Enumeration

CWE-59

CWE-269

Related Identifiers

CVE-2026-44470

Affected Products

Claude Desktop

References · 4

• https://github.com/anthropics/claude-code/security/advisories/GHSA-5p5x-5294-qhp3 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2026-44470 · Security Note
• https://twitter.com/piquopiquo/status/2052155820750553408 · Twitter Post
• https://t.me/CVEtracker/53668 · Telegram Post