CVE-2026-35021

Named by 2 kept items in this workspace.

Search every workspace for CVE-2026-35021. It matches the name as written, so it can find other things that share it.

The items that name it 2

Top 10 attacks on Claude Code and what each one actually broke
writeup2026-09-23
Command injection finding related to Claude Code's deny-rule/permission system; assigned by VulnCheck (not Anthropic); flagged as disputed in OSV.
When the Guardrails Slip: The Case for Hook-Based Governance Across Agent Platforms | Blog | Endor Labs
article2026-07-31
POSIX double-quote bypass command injection in Claude Code's editor-path utility; $() and backtick substitution evaluate inside double quotes. Confirmed exploitable on v2.1.91. Disclosed by Phoenix Security.

All cves in this workspace.