{"data":{"id":"4eb5b7ef-f75b-42aa-99a3-d441a593ad64","title":"CVE-2026-73614: Network-AI ClaudeHookBridge before 5.15.1 truncates the target string to 500 characters before evaluating denyPatterns, ","summary":"ClaudeHookBridge (a tool that connects Claude AI to network systems) before version 5.15.1 has a security flaw where it shortens commands to 500 characters before checking a blocklist (denyPatterns), but then executes the full original command. Attackers can hide dangerous code after the 500-character limit to bypass security checks and run unauthorized commands on the system.","solution":"Upgrade to ClaudeHookBridge version 5.15.1 or later.","labels":["security"],"sourceUrl":"https://nvd.nist.gov/vuln/detail/CVE-2026-73614","publishedAt":"2026-08-13T12:17:26.197Z","cveId":"CVE-2026-73614","cweIds":["CWE-436"],"cvssScore":"8.8","cvssSeverity":"high","severity":"high","attackType":["prompt_injection"],"issueType":"vulnerability","affectedPackages":null,"affectedVendors":["Anthropic"],"affectedVendorsRaw":["Network-AI","ClaudeHookBridge","Claude"],"classifierModel":"claude-haiku-4-5-20251001","classifierPromptVersion":"v3","cvssVector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","attackVector":"network","attackComplexity":"low","privilegesRequired":"low","userInteraction":"none","exploitMaturity":"unknown","epssScore":0,"patchAvailable":null,"disclosureDate":"2026-08-13T12:17:26.197Z","capecIds":null,"crossRefCount":0,"attackSophistication":"moderate","impactType":["integrity","confidentiality","availability"],"aiComponentTargeted":"api","llmSpecific":true,"classifierConfidence":0.85,"researchCategory":null,"atlasIds":["AML.T0051"]}}