CVE-2026-35022

Named by 2 kept items in this workspace.

Search every workspace for CVE-2026-35022. It matches the name as written, so it can find other things that share it.

The items that name it 2

Top 10 attacks on Claude Code and what each one actually broke
writeup2026-09-23
Command injection finding related to Claude Code's deny-rule/permission system; assigned by VulnCheck (not Anthropic); flagged as disputed in OSV.
When the Guardrails Slip: The Case for Hook-Based Governance Across Agent Platforms | Blog | Endor Labs
article2026-07-31
Command injection in Claude Code auth-helper configuration values, invoked with shell=true and no input validation, giving a reliable execution sink on every auth cycle. Confirmed exploitable on v2.1.91. Disclosed by Phoenix Security.

All cves in this workspace.