{"data":{"id":"501d3234-fe61-48de-a886-f6ff378bf736","title":"CVE-2026-96620: Claude Agent SDK is a Python SDK for Claude Code. Prior to 0.2.121, the resume option is passed to the Claude CLI as a…","summary":"Claude Agent SDK for Python, prior to 0.2.121, passes the resume option to the Claude CLI as a separate token without validation. A dash-leading value is parsed as an independent CLI flag, so an attacker can inject --mcp-config to define a stdio MCP server and execute arbitrary commands at CLI startup, outside SDK permission controls. Exploitation requires an application that passes untrusted input as the session ID to resume.","solution":"Fixed in version 0.2.121.","labels":["security"],"sourceUrl":"https://nvd.nist.gov/vuln/detail/CVE-2026-96620","publishedAt":"2026-10-16T20:18:28.293Z","cveId":"CVE-2026-96620","cweIds":["CWE-20","CWE-78","CWE-88"],"cvssScore":null,"cvssSeverity":null,"severity":"high","attackType":["other"],"issueType":"vulnerability","affectedPackages":["claude-agent-sdk@< 0.2.121 (fixed: 0.2.121)"],"affectedPackageNames":["claude-agent-sdk"],"affectedPackageRefs":["pypi:claude-agent-sdk"],"affectedVendors":["Anthropic"],"affectedVendorsRaw":["Claude Agent SDK","Claude Code","Claude CLI"],"classifierModel":"claude-haiku-5-5","classifierPromptVersion":"v4","summaryPromptVersion":"v2","headline":"Claude Agent SDK argument injection via resume option enabling command execution","headlinePromptVersion":"h1","cvssVector":null,"attackVector":null,"attackComplexity":null,"privilegesRequired":null,"userInteraction":null,"exploitMaturity":"unknown","epssScore":0,"epssCheckedAt":"2026-10-17T06:08:47.069Z","kevDateAdded":null,"advisoryAliases":["GHSA-h4mw-j7qp-8mwm"],"affectedPackagesSource":"ghsa","affectedPackagesCheckedAt":"2026-10-17T06:08:50.674Z","patchAvailable":true,"disclosureDate":"2026-10-16T20:18:28.293Z","capecIds":["CAPEC-88"],"crossRefCount":0,"attackSophistication":"moderate","impactType":["confidentiality","integrity","availability"],"aiComponentTargeted":"api","llmSpecific":true,"classifierConfidence":0.95,"researchCategory":null,"atlasIds":null}}