AI developer toolsBriefConfirmed by two or more outlets
Claude Code 2026 CVEs
CVE-2026-24887: `find` command parsing bypasses the approval prompt.
- Disclosed
What happened
- CVE-2026-24887: `find` command parsing bypasses the approval prompt. CVSS 7.7. Fixed in 2.0.72 (GHSA-qgqw-h4xq-7w8w).
- CVE-2026-35020 / -35021 / -35022: command injection chain in the CLI and Agent SDK (reported still working on 2.1.91, 3 Apr 2026).
- CVE-2026-39861: sandbox escape through prompt injection.
- CVE-2026-54316: exfiltration through the Hugging Face download counter. Fixed in 2.1.163.
- No CVE: the deny-rule bypass beyond 50 chained subcommands (Adversa).
Live scores
Live scores
CVE-2026-24887- EPSS
- 0.006
low predicted chance of attack - VEDAS
- 0.048
little exploit evidence - On CISA KEV
- Not listed
- Detection rule
- None yet
Live scores
CVE-2026-35020- EPSS
- 0.001
low predicted chance of attack - VEDAS
- 0.047
little exploit evidence - On CISA KEV
- Not listed
- Detection rule
- None yet
Live scores
CVE-2026-35021- EPSS
- 0.000
low predicted chance of attack - VEDAS
- 0.047
little exploit evidence - On CISA KEV
- Not listed
- Detection rule
- None yet
Live scores
CVE-2026-35022- EPSS
- 0.006
low predicted chance of attack - VEDAS
- 0.050
little exploit evidence - On CISA KEV
- Not listed
- Detection rule
- None yet
Live scores
CVE-2026-39861- EPSS
- 0.007
low predicted chance of attack - VEDAS
- 0.044
little exploit evidence - On CISA KEV
- Not listed
- Detection rule
- None yet
Live scores
CVE-2026-54316- EPSS
- 0.005
low predicted chance of attack - VEDAS
- 0.055
little exploit evidence - On CISA KEV
- Not listed
- Detection rule
- None yet
Thin horizontal line: the “likely” (EPSS 0.10) or “strong” (VEDAS 0.90) threshold. Shaded “no data” areas are periods when cve-scores did not publish.
Sources
- https://github.com/advisories/GHSA-qgqw-h4xq-7w8w
- https://www.sentinelone.com/vulnerability-database/cve-2026-35021/
- https://thehackernews.com/2026/08/claude-code-and-gemini-cli-flaws-let.html
This is a brief: a short, sourced summary from our incident tracking. Full advisories add commands to check whether you are affected.