PT-2026-41732 · Unknown · Claude-Hud

Katriel Moses · CVE-2026-47092 · Published 2026-05-18 · Updated 2026-05-19

Positive Technologies (AI Summary)

CVSS v3.1

7.8

High

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Claude HUD versions 0.0.0 through 0.0.12

Description Local attackers can execute arbitrary commands on Windows systems by manipulating the COMSPEC environment variable. By setting COMSPEC to an arbitrary binary path before the software performs its version check, the execFile() function executes the attacker-supplied executable with cmd.exe arguments, leading to arbitrary code execution.

Recommendations Update to the version containing commit 234d9aa.

Exploit

Fix

Uncontrolled Search Path Element

Weakness Enumeration

CWE-427

Related Identifiers

CVE-2026-47092

Affected Products

Claude-Hud

References · 11

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/47xxx/CVE-2026-47092.json · Exploit
• https://github.com/jarrodwatts/claude-hud/pull/487 · Patch
• https://github.com/jarrodwatts/claude-hud/commit/234d9aad919b51326a43bcf90b45ae35c23afc30 · Patch
• https://nvd.nist.gov/vuln/detail/CVE-2026-47092 · Security Note
• https://osv.dev/vulnerability/CVE-2026-47092 · Vendor Advisory
• https://github.com/jarrodwatts/claude-hud · Note
• https://github.com/jarrodwatts/claude-hud/issues/485 · Note
• https://twitter.com/infoflowcloud/status/2056671645515862299 · Twitter Post
• https://vulncheck.com/advisories/claude-hud-arbitrary-command-execution-via-comspec-environment-variable · Note
• https://t.me/CVEtracker/54169 · Telegram Post
• https://twitter.com/CVEnew/status/2056670131699458497 · Twitter Post