CVE-2026-35020

Named by 2 kept items in this workspace.

Search every workspace for CVE-2026-35020. It matches the name as written, so it can find other things that share it.

The items that name it 2

Top 10 attacks on Claude Code and what each one actually broke
writeup2026-09-23
Command injection finding related to Claude Code's deny-rule/permission system; assigned by VulnCheck (not Anthropic); flagged as disputed in OSV.
When the Guardrails Slip: The Case for Hook-Based Governance Across Agent Platforms | Blog | Endor Labs
article2026-07-31
Zero-interaction command injection in Claude Code CLI via attacker-controlled TERMINAL environment variable, giving arbitrary command execution during CLI initialization. Confirmed exploitable on v2.1.91. Disclosed by Phoenix Security.

All cves in this workspace.