CVE-2026-47092: Uncontrolled Search Path Element in jarrodwatts claude-hud
Claude HUD through 0.0.12, patched in commit 234d9aa, contains a command injection vulnerability that allows local attackers to execute arbitrary commands by manipulating the COMSPEC environment variable. Attackers can set COMSPEC to an arbitrary binary path before claude-hud performs its version check, causing execFile() to execute the attacker-supplied executable with cmd.exe arguments, resulting in arbitrary code execution on Windows systems.
AI Analysis
Technical Summary
CVE-2026-47092 is a command injection vulnerability in the jarrodwatts claude-hud project affecting versions up to 0.0.12. Local attackers on Windows can exploit this by setting the COMSPEC environment variable to an arbitrary binary path before claude-hud performs its version check. The application then uses execFile() with cmd.exe arguments, causing execution of the attacker-controlled executable. This leads to arbitrary code execution on affected Windows systems. The vulnerability is fixed in commit 234d9aa, included in version 0.0.13.
Potential Impact
Successful exploitation allows local attackers with low privileges to execute arbitrary code on Windows systems where claude-hud is installed. This can lead to full compromise of the affected system under the context of the user running claude-hud. The CVSS 4.0 score is 7.3 (high severity), reflecting the local attack vector but high impact on confidentiality, integrity, and availability.
Mitigation Recommendations
Upgrade claude-hud to version 0.0.13 or later, which includes the patch for this vulnerability (commit 234d9aa). No other mitigation or workaround is documented. Users should ensure they do not run vulnerable versions on Windows systems.
CVE-2026-47092: Uncontrolled Search Path Element in jarrodwatts claude-hud
Description
Claude HUD through 0.0.12, patched in commit 234d9aa, contains a command injection vulnerability that allows local attackers to execute arbitrary commands by manipulating the COMSPEC environment variable. Attackers can set COMSPEC to an arbitrary binary path before claude-hud performs its version check, causing execFile() to execute the attacker-supplied executable with cmd.exe arguments, resulting in arbitrary code execution on Windows systems.
CVSS v4.0
Score 7.3high
Affected software
Run on your own infrastructure? Check whether these packages are installed with threat-finder — our free open-source scanner.
AI-Powered Analysis
Machine-generated threat intelligence
Technical Analysis
CVE-2026-47092 is a command injection vulnerability in the jarrodwatts claude-hud project affecting versions up to 0.0.12. Local attackers on Windows can exploit this by setting the COMSPEC environment variable to an arbitrary binary path before claude-hud performs its version check. The application then uses execFile() with cmd.exe arguments, causing execution of the attacker-controlled executable. This leads to arbitrary code execution on affected Windows systems. The vulnerability is fixed in commit 234d9aa, included in version 0.0.13.
Potential Impact
Successful exploitation allows local attackers with low privileges to execute arbitrary code on Windows systems where claude-hud is installed. This can lead to full compromise of the affected system under the context of the user running claude-hud. The CVSS 4.0 score is 7.3 (high severity), reflecting the local attack vector but high impact on confidentiality, integrity, and availability.
Mitigation Recommendations
Upgrade claude-hud to version 0.0.13 or later, which includes the patch for this vulnerability (commit 234d9aa). No other mitigation or workaround is documented. Users should ensure they do not run vulnerable versions on Windows systems.
Technical Details
- Data Version
- 5.2
- Assigner Short Name
- VulnCheck
- Date Reserved
- 2026-05-18T19:22:26.747Z
- Cvss Version
- 4.0
- State
- PUBLISHED
- Remediation Level
- null
Threat ID: 6a0c25c6ec166c07b0877153
Added to database: 05/19/2026, 08:56:38 UTC
Last enriched: 07/15/2026, 10:03:14 UTC
Last updated: 07/31/2026, 19:22:59 UTC
Views: 110
Community Reviews
0 reviewsCrowdsource mitigation strategies, share intel context, and vote on the most helpful responses. Sign in to add your voice and help keep defenders ahead.
Want to contribute mitigation steps or threat intel context? Sign in or create an account to join the community discussion.
Actions
Updates to AI analysis require Pro Console access. Upgrade inside Console → Billing.
Need more coverage?
Upgrade to Pro Console for AI refresh and higher limits.
For incident response and remediation, OffSeq services can help resolve threats faster.
Latest Threats
Check if your credentials are on the dark web
Instant breach scanning across billions of leaked records. Free tier available.