CVE-2026-88968

Vendor

Anthropics

Product

claude-code

CVSS v4.0

7.7 AV:N/AC:L/AT:P/PR:N/UI:P/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Weakness

CWE-59, CWE-367

Exposure class

Operating system, AI infrastructure

Every item in the archive that references this CVE, highest rank first. Headlines open the publisher.

1. 41
   CVE NVD 3h ago

   Claude Code is an agentic coding tool.

   Claude Code is an agentic coding tool. Prior to 2.1.251, the Edit tool validates a target using pathname and symlink resolution that is not bound to the underlying directory inode or file descriptor. On macOS, attacker-controlled…

   CVSS 7.7 Fix available CVE-2026-88968 Anthropics