{"data":{"id":"b1cb46d6-b312-42bc-91cc-6e87ede99e42","title":"CVE-2026-84810: claude-skill-antivirus fails to analyze executable files when scanning local skill directories, reading only SKILL.md wh","summary":"claude-skill-antivirus has a vulnerability where it only scans SKILL.md (a manifest file describing what a skill does) but ignores actual executable files like Python scripts and compiled code when checking skill packages for safety. This means attackers can hide malicious code in the executable files while the manifest stays clean, causing the tool to incorrectly mark dangerous skills as completely safe.","solution":"N/A -- no mitigation discussed in source.","labels":["security"],"sourceUrl":"https://nvd.nist.gov/vuln/detail/CVE-2026-84810","publishedAt":"2026-09-02T17:18:05.297Z","cveId":"CVE-2026-84810","cweIds":["CWE-693"],"cvssScore":"6.5","cvssSeverity":"medium","severity":"medium","attackType":["supply_chain"],"issueType":"vulnerability","affectedPackages":null,"affectedVendors":["Anthropic"],"affectedVendorsRaw":["claude-skill-antivirus","Anthropic Claude"],"classifierModel":"claude-haiku-4-5-20251001","classifierPromptVersion":"v3","cvssVector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N","attackVector":"network","attackComplexity":"low","privilegesRequired":"none","userInteraction":"required","exploitMaturity":"unknown","epssScore":0,"patchAvailable":null,"disclosureDate":"2026-09-02T17:18:05.297Z","capecIds":null,"crossRefCount":0,"attackSophistication":"trivial","impactType":["integrity"],"aiComponentTargeted":"plugin","llmSpecific":true,"classifierConfidence":0.85,"researchCategory":null,"atlasIds":["AML.T0010"]}}