Threats tagged 'ghsa-h4mw-j7qp-8mwm'

1 threat

Severity	CVSS	Signals	Threat	Source	Published	Score and star
Critical	9.2	EPSS 0.7%	CVE-2026-96620anthropics claude-agent-sdk-python · Improper Input Validation Critical9.2EPSS 0.7%2026-10-16CVE Database V5CVE-2026-96620 CVE-2026-96620 is a critical vulnerability in the anthropics claude-agent-sdk-python prior to version 0.2.121. The issue arises from improper input validation of the resume option passed to the Claude CLI, allowing an attacker to inject CLI flags such as --mcp-config. This can lead to arbitrary command execution at CLI startup, bypassing SDK permission controls. The vulnerability is fixed in version 0.2.121. EPSS 0.7%Vulnerability CWE-20 #ghsa-h4mw-j7qp-8mwm #pypi	CVE Database V5	2026-10-16

Page 1 of 1