CVE-2026-54316
Information exposure in Anthropic Claude Code
CVSS score
9.1
EPSS probability
%0.5
Risk score
0.0
Published
3 mo ago
Public Exploits · GitHub and Metasploit Intelligence
This tab scans the sources that NVD labels as exploits, GitHub repositories matching the CVE identifier and Rapid7 Metasploit Framework modules. Only links to sources that were actually found are shown.
GitHub
Reproduction lab for CVE-2026-54316 (Claude Code WebFetch huggingface.co bare-hostname permission bypass / exfiltration)
Makefile Go / Python
Similar Vulnerabilities
8.8
CVE-2025-59536Code injection in Anthropic Claude Code
Patch status unknown Public Exploits:4EPSS %27
10.0
CVE-2026-25725Vulnerability in Anthropic Claude Code
Patch status unknownEPSS %1
8.8
CVE-2026-55607Path traversal in Anthropic Claude Code
Patch status unknownEPSS %1
9.8
CVE-2025-64755OS command injection in Anthropic Claude Code
Patch status unknownEPSS %1
9.8
CVE-2025-65099Code injection in Anthropic Claude Code
Patch status unknownEPSS %1
8.8
CVE-2026-40068Improper input validation in Anthropic Claude Code
Patch status unknownEPSS %1
Get this vulnerability through the API
Affected products, version ranges, exploitation status and patch information in a single request, with a free key.
curl -H "x-api-key: $DAYBREACH_API_KEY" \ "https://api.daybreach.dev/api/v1/intel/cves/CVE-2026-54316"