CVE-2026-47090 affects Claude HUD through version 0.0.12. The vulnerability arises because the software constructs OSC 8 terminal hyperlink escape sequences using raw current working directory (cwd) and branchUrl values without sanitizing control characters or encoding embedded values. This improper neutralization enables attackers to inject arbitrary ANSI escape sequences, including ESC+backslash sequences, into terminal sessions. Exploitation can lead to visual manipulation such as text color changes and forged prompts, clipboard writes via OSC 52 sequences, or outbound HTTP requests to attacker-controlled URLs when hyperlinks are activated. The issue was patched in commit 234d9aa.

The vulnerability allows attackers with local access and limited privileges to inject arbitrary ANSI escape codes into terminal sessions. This can result in misleading terminal output, clipboard manipulation, or triggering outbound HTTP requests when users click on crafted hyperlinks. However, the impact is limited by the requirement for local access and user interaction, and no privilege escalation or direct code execution is indicated. The CVSS score of 2.4 reflects the low severity and limited attack vector.

A patch addressing this vulnerability was introduced in commit 234d9aa. Users should upgrade Claude HUD to the fixed version that includes this commit. Since the vendor advisory or patch links are not explicitly provided, confirm the patch availability by reviewing the project's repository for commit 234d9aa. Until patched, avoid using untrusted inputs in terminal hyperlink sequences or disable hyperlink support if possible.