Vulnerabilities in Anthropic

6 results

CVE-2026-0621HIGHMCP TypeScript SDK UriTemplate Exploded Array Pattern ReDoSEPSS 0.4%CVE-2025-34072CRITICALAnthropic Slack MCP Server Data Exfiltration via Link UnfurlingEPSS 0.4%CVE-2026-103435HIGHArbitrary File Write via Write-Time Symlink Following (TOCTOU) in Claude CodeEPSS 0.3%CVE-2026-22561MEDIUMUncontrolled search path elements in Anthropic Claude for Windows installer (Claude Setup.exe) versions prior to 1.1.3363 allow local privilEPSS 0.2%CVE-2026-7574HIGHAnthropic Claude Desktop Cowork VM Image Contents Not Validated Before UseEPSS 0.1%CVE-2026-103012LOWClaude Code selected an API key stored by Claude Code, for example from an earlier `/login` or written directly to its configuration, ahead EPSS 0.1%