{"data":{"id":"253f33dd-f2b3-4ebc-bd84-69d43b807577","title":"CVE-2026-24053: Claude Code is an agentic coding tool. Prior to version 2.0.74, due to a Bash command validation flaw in parsing ZSH…","summary":"CVE-2026-24053 affects Claude Code prior to version 2.0.74. A Bash command validation flaw in parsing ZSH clobber syntax let an attacker bypass directory restrictions and write files outside the current working directory without user permission prompts. Exploitation required the user to run ZSH and the ability to add untrusted content into a Claude Code context window.","solution":"Fixed in version 2.0.74.","labels":["security"],"sourceUrl":"https://nvd.nist.gov/vuln/detail/CVE-2026-24053","publishedAt":"2026-02-03T21:16:13.220Z","cveId":"CVE-2026-24053","cweIds":["CWE-22","CWE-79","CWE-22"],"cvssScore":"6.5","cvssSeverity":"medium","severity":"medium","attackType":["other"],"issueType":"vulnerability","affectedPackages":["@anthropic-ai/claude-code@< 2.0.74 (fixed: 2.0.74)"],"affectedPackageNames":["@anthropic-ai/claude-code"],"affectedPackageRefs":["npm:@anthropic-ai/claude-code"],"affectedVendors":[],"affectedVendorsRaw":["Claude Code"],"classifierModel":"claude-haiku-5-5","classifierPromptVersion":"v4","summaryPromptVersion":"v2","headline":"Claude Code Bash validation flaw in ZSH clobber syntax allows file writes","headlinePromptVersion":"h1","cvssVector":null,"attackVector":null,"attackComplexity":null,"privilegesRequired":null,"userInteraction":null,"exploitMaturity":"unknown","epssScore":0.00514,"epssCheckedAt":"2026-11-04T00:12:27.579Z","kevDateAdded":null,"advisoryAliases":["GHSA-q728-gf8j-w49r"],"affectedPackagesSource":"ghsa","affectedPackagesCheckedAt":"2026-10-10T03:51:04.178Z","patchAvailable":true,"disclosureDate":null,"fixReleasedAt":"2025-12-19T21:08:38.116Z","daysToFix":-46,"fixCheckedAt":"2026-10-29T21:41:51.758Z","capecIds":["CAPEC-126","CAPEC-198","CAPEC-86"],"crossRefCount":0,"attackSophistication":"moderate","impactType":["integrity"],"aiComponentTargeted":"plugin","llmSpecific":true,"classifierConfidence":0.85,"researchCategory":null,"atlasIds":null,"fixes":[{"ecosystem":"npm","name":"@anthropic-ai/claude-code","fixedVersion":"2.0.74","matchedVersion":"2.0.74","fixReleasedAt":"2025-12-19T21:08:38.116Z","daysToFix":-46,"match":"ecosystem","source":"registry","status":"found","checkedAt":"2026-10-29T21:41:51.609Z"}]}}