CVE record · 1 source
CVE-2026-103435
Claude Code validated that a target file path resided within the project working directory at permission-check time, but re-resolved the path at…
- Vendor
- Anthropic
- Product
- Claude
- Exposure class
- AI infrastructure
Coverage
1Every item in the archive that references this CVE, highest rank first. Headlines open the publisher.
-
Claude Code validated that a target file path resided within the project working directory at permission-check time, but re-resolved the path at…
Claude Code validated that a target file path resided within the project working directory at permission-check time, but re-resolved the path at write time without repeating that validation. This time-of-check to time-of-use…