PT-2026-6187 · Anthropic · Claude-Code

Alex Bernier · Published 2026-02-03 · Updated 2026-02-06 · CVE-2026-24053

Positive Technologies (AI Summary)

CVSS v4.0

7.7

High

Base vector

AV:N/AC:L/AT:P/PR:N/UI:P/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N

Name of the Vulnerable Software and Affected Versions Claude Code versions prior to 2.0.74

Description Claude Code is an agentic coding tool affected by a Bash command validation flaw when parsing ZSH clobber syntax. This flaw allowed bypassing directory restrictions and writing files outside the current working directory without user permission prompts. Exploitation required the use of ZSH and the ability to add untrusted content into a Claude Code context window.

Recommendations Update to version 2.0.74 or later.

Exploit

Fix

Path traversal

OS Command Injection

XSS

Weakness Enumeration

CWE-22

CWE-78

CWE-79

Related Identifiers

CVE-2026-24053

GHSA-Q728-GF8J-W49R

Affected Products

Claude-Code

References · 8

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/24xxx/CVE-2026-24053.json · Exploit
• https://github.com/anthropics/claude-code/security/advisories/GHSA-q728-gf8j-w49r · Vendor Advisory
• https://osv.dev/vulnerability/GHSA-q728-gf8j-w49r · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2026-24053 · Security Note
• https://osv.dev/vulnerability/CVE-2026-24053 · Vendor Advisory
• https://github.com/anthropics/claude-code · Note
• https://twitter.com/CVEnew/status/2018799277628105106 · Twitter Post
• https://t.me/cveNotify/151211 · Telegram Post