CVE-2026-54316
Information exposure in Anthropic Claude Code
CVSS Skor
9.1
EPSS İhtimal
%0.5
Risk Skoru
0.0
Yayın
3 ay önce
İlgili Siber Güvenlik Haberleri (Newsroom)
Bu zafiyetin basında ve siber güvenlik yayın organlarında yer aldığı makaleler ve analiz bültenleri:
Claude Code and Gemini CLI Flaws Let a GitHub Issue Reach CI Workflow Secrets
A GitHub issue opened by an account with no repository privileges was enough to execute code on the CI runners behind Anthropic's and Google's own coding-agent repositories. On OpenAI's, it was enough to hijack the next agent run. Novee Security ran the attack against each vendor's agent in the configuration that the vendor ships by default, and presented the work at Black Hat USA on August 5.
İlgili Benzer Açıklar
8.8
CVE-2025-59536Code injection in Anthropic Claude Code
Yama durumu bilinmiyor Public Exploits:4EPSS %27
10.0
CVE-2026-25725Vulnerability in Anthropic Claude Code
Yama durumu bilinmiyorEPSS %1
8.8
CVE-2026-55607Path traversal in Anthropic Claude Code
Yama durumu bilinmiyorEPSS %1
9.8
CVE-2025-64755OS command injection in Anthropic Claude Code
Yama durumu bilinmiyorEPSS %1
9.8
CVE-2025-65099Code injection in Anthropic Claude Code
Yama durumu bilinmiyorEPSS %1
8.8
CVE-2026-40068Improper input validation in Anthropic Claude Code
Yama durumu bilinmiyorEPSS %1
Bu açığı API ile alın
Etkilenen ürünler, sürüm aralıkları, istismar durumu ve yama bilgisi tek istekte; ücretsiz anahtarla.
curl -H "x-api-key: $DAYBREACH_API_KEY" \ "https://api.daybreach.dev/api/v1/intel/cves/CVE-2026-54316"