PT-2026-41731 · Unknown · Claude-Hud

Katriel Moses · CVE-2026-47091 · Published 2026-05-18 · Updated 2026-05-20

Positive Technologies (AI Summary)

CVSS v4.0

4.8

Medium

Base vector

AV:L/AC:L/AT:N/PR:L/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N

Name of the Vulnerable Software and Affected Versions Claude HUD versions 0.0.0 through 0.0.12

Description A path traversal issue allows attackers to read arbitrary files by providing an unvalidated transcript path value via stdin JSON. This enables access to any file readable by the process. Additionally, file metadata is written to a persistent cache file with insufficient permissions, which creates a forensic record of the accessed paths that remains after the process exits.

Recommendations Update to the version containing commit 234d9aa.

Exploit

Fix

Path traversal

Weakness Enumeration

CWE-22

Related Identifiers

CVE-2026-47091

Affected Products

Claude-Hud

References · 11

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/47xxx/CVE-2026-47091.json · Exploit
• https://github.com/jarrodwatts/claude-hud/pull/487 · Patch
• https://github.com/jarrodwatts/claude-hud/commit/234d9aad919b51326a43bcf90b45ae35c23afc30 · Patch
• https://osv.dev/vulnerability/CVE-2026-47091 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2026-47091 · Security Note
• https://github.com/jarrodwatts/claude-hud · Note
• https://github.com/jarrodwatts/claude-hud/issues/485 · Note
• https://twitter.com/infoflowcloud/status/2056994896934826206 · Twitter Post
• https://twitter.com/CVEnew/status/2056994229801701787 · Twitter Post
• https://vulncheck.com/advisories/claude-hud-path-traversal-via-transcript-path · Note
• https://t.me/CVEtracker/54168 · Telegram Post