PT-2026-6486 · Npm · @Anthropic-Ai/Claude-Code

Published 2026-02-03 · Updated 2026-02-03

OSV

CVSS v4.0

7.1

High

Base vector

AV:N/AC:L/AT:N/PR:N/UI:P/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N

Claude Code contained insufficient URL validation in its trusted domain verification mechanism for WebFetch requests. The application used a startsWith() function to validate trusted domains (e.g., docs.python.org, modelcontextprotocol.io), this could have enabled attackers to register domains like modelcontextprotocol.io.example.com that would pass validation. This could enable automatic requests to attacker-controlled domains without user consent, potentially leading to data exfiltration.

Users on standard Claude Code auto-update have received this fix already. Users performing manual updates are advised to update to the latest version.

Thank you to hackerone.com/47sid-praetorian for reporting this issue!

Fix

Open Redirect

Weakness Enumeration

CWE-601

Related Identifiers

GHSA-VHW5-3G5M-8GGF

Affected Products

@Anthropic-Ai/Claude-Code

References · 4

• https://nvd.nist.gov/vuln/detail/CVE-2026-24052 · Security Note
• https://osv.dev/vulnerability/GHSA-vhw5-3g5m-8ggf · Vendor Advisory
• https://github.com/anthropics/claude-code · Note
• https://github.com/anthropics/claude-code/security/advisories/GHSA-vhw5-3g5m-8ggf · Note