CVE-2026-47090 affects Claude HUD through version 0.0.12. The vulnerability arises because the software constructs OSC 8 terminal hyperlink escape sequences using raw values from the current working directory and branch URL without sanitizing or encoding control characters. This improper neutralization enables attackers to inject arbitrary ANSI escape sequences, including ESC+backslash sequences, into terminal sessions. Such injections can manipulate terminal display properties, forge prompts, perform clipboard writes via OSC 52 sequences, or cause outbound HTTP requests to attacker-controlled servers when users click on the crafted hyperlinks. The issue is fixed in commit 234d9aa. There is no vendor advisory or official patch release noted beyond this commit reference.

Attackers can inject arbitrary ANSI escape codes into terminal sessions, which may lead to visual deception (e.g., forged prompts, altered text colors), clipboard manipulation, or triggering outbound HTTP requests when users interact with terminal hyperlinks. The CVSS score of 2.4 and low severity rating indicate limited impact and that exploitation requires user interaction with crafted terminal hyperlinks. There are no known exploits in the wild.

A fix is available as indicated by the patch in commit 234d9aa. Users should update Claude HUD to the version including this commit to mitigate the vulnerability. Since no official vendor advisory or patch release is provided, users should track the project repository for the patched version or apply the commit manually. Until patched, avoid using untrusted inputs in terminal hyperlink sequences or sanitize inputs to remove control characters.