{"data":{"id":"4ec3ae43-746e-4e0b-817c-85a87742a4c1","title":"CVE-2026-73222: Claude Code Templates is a CLI tool for configuring and monitoring Claude Code. Prior to 1.29.4, the Claude Code Studio ","summary":"Claude Code Templates is a CLI tool with a critical vulnerability in versions before 1.29.4 where its Studio server binds to all network interfaces without authentication and allows attackers to execute arbitrary operating-system commands (running code on a system without permission) by sending specially crafted requests to the /api/execute or /api/install-agent endpoints. An attacker can exploit this by directly accessing the server or tricking a developer into visiting a malicious website, potentially stealing source code, credentials, and local data.","solution":"Update Claude Code Templates to version 1.29.4 or later, as this version fixes the vulnerability.","labels":["security"],"sourceUrl":"https://nvd.nist.gov/vuln/detail/CVE-2026-73222","publishedAt":"2026-08-11T19:18:51.720Z","cveId":"CVE-2026-73222","cweIds":["CWE-78","CWE-306","CWE-352"],"cvssScore":"8.8","cvssSeverity":"high","severity":"high","attackType":["supply_chain"],"issueType":"vulnerability","affectedPackages":null,"affectedVendors":["Anthropic"],"affectedVendorsRaw":["Anthropic","Claude Code Templates","Claude Code Studio"],"classifierModel":"claude-haiku-4-5-20251001","classifierPromptVersion":"v3","cvssVector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","attackVector":"network","attackComplexity":"low","privilegesRequired":"none","userInteraction":"required","exploitMaturity":"unknown","epssScore":0,"patchAvailable":null,"disclosureDate":"2026-08-11T19:18:51.720Z","capecIds":["CAPEC-115","CAPEC-88"],"crossRefCount":0,"attackSophistication":"moderate","impactType":["confidentiality","integrity","availability"],"aiComponentTargeted":"api","llmSpecific":true,"classifierConfidence":0.95,"researchCategory":null,"atlasIds":["AML.T0010"]}}