MediumVulnerability

CVE-2026-47090: Claude HUD terminal escape injection through unsanitized cwd and branchUrl

Source: NVD(opens in a new tab)
Identifier: CVE-2026-47090
Published: May 18, 2026
Record updated: October 9, 2026

Known exploitation: Not listed in the CISA Known Exploited Vulnerabilities catalog at the last check.
EPSS: 0.1%

Summary

Claude HUD through 0.0.12 builds OSC 8 terminal hyperlink escape sequences from raw cwd and branchUrl values without stripping control characters or encoding embedded content, enabling injection of arbitrary ANSI codes into terminal sessions. An attacker who embeds ESC+backslash sequences in the working directory or branch URL can change text colors, forge prompts, write to the clipboard via OSC 52, or trigger outbound HTTP requests to attacker-controlled remotes when a hyperlink is clicked.

Mitigation

Patched in commit 234d9aa.

Details

Scores and exploitation

CVSS score: 4.6(medium)
CVSS vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N
Attack vector: local
Attack complexity: low
Privileges required: low
User interaction: required
EPSS: 0.1%Estimated probability that this CVE is exploited in the next 30 days, from the FIRST Exploit Prediction Scoring System. Read on October 11, 2026.
Disclosure date: May 18, 2026

Weaknesses and techniques

Weakness (CWE): CWE-150

Classification

Attack type: Other
Attack sophistication: Moderate
AI component targeted: Plugin
Impact: Integrity,
Confidentiality
Labels: security

How this record was produced

Summaries, mitigations and labels on this page are generated automatically from the source. The linked source is authoritative. The source gives this advisory a description and no title, so the title above is a headline generated from the source text.

Original source: https://nvd.nist.gov/vuln/detail/CVE-2026-47090

First tracked: May 18, 2026 at 08:12 PM ET, from NVD/CVE Database

Classifier: claude-haiku-5-5, prompt v4

Classifier confidence: 80% (self-assessed)

Summary

Mitigation

Related items