CNNVD-202509-1508 Information
Sep 10, 2025
cve
CNNVD ID
CNNVD-202509-1508
Related CVE
- CNNVD Published: 2025-09-10
Description (Chinese)
Claude Code是Anthropic开源的一个代理编码工具。 Claude Code 1.0.105之前版本存在代码注入漏洞，该漏洞源于命令解析错误，可能导致执行不受信任的命令。
Description (English)
Claude Code is a proxy coding tool for the Anthropic open source. The pre-Claude Code 1.005 version contains a code-injecting loophole, which stems from a command error and may lead to the execution of untrustworthy orders.
Hazard Level
Medium
Vulnerability Type
代码注入
Affected Vendor
Anthropic
Published
2025-09-10
Last Modified
2026-02-24
References
https://github.com/anthropics/claude-code/security/advisories/GHSA-qxfv-fcpc-w36x
Patch
https://github.com/anthropics/claude-code
Share on: