CVE Explorer
CVE-2026-21852
Claude Code is an agentic coding tool. Prior to version 2.0.65, vulnerability in Claude Code's project-load flow allowed malicious repositories to exfiltrate data including Anthropic API keys before users confirmed trust. An attacker-controlled repository could include a settings file that sets ANTHROPIC_BASE_URL to an attacker-controlled endpoint and when the repository was opened, Claude Code would read the configuration and immediately issue API requests before showing the trust prompt, poten
Known exploited
Not asserted
Disputed
No
Stale source
No
Conflicts
0
Affected products and versions
1 source assertion{"product":"claude-code","vendor":"anthropics","versions":[{"status":"affected","version":"< 2.0.65"}]}
- cve_program_cvelist_v5affectedurn:baitaphish:normalized-source-record:v2:81425c6edf1c988596f6ac66e7dfffa0042ee829395c9a8e25ca57da2ff4f04a · sha256:62a3ed8ff2d6395c… · /containers/cna/affected/0
Provider-owned CVSS observations
1 source assertion{"metric":{"attackComplexity":"LOW","attackRequirements":"NONE","attackVector":"NETWORK","baseScore":5.3,"baseSeverity":"MEDIUM","privilegesRequired":"NONE","subAvailabilityImpact":"NONE","subConfidentialityImpact":"NONE","subIntegrityImpact":"NONE","userInteraction":"PASSIVE","vectorString":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N","version":"4.0","vulnAvailabilityImpact":"LOW","vulnConfidentialityImpact":"LOW","vulnIntegrityImpact":"LOW"},"metric_type":"cvssV4_0"}
- cve_program_cvelist_v5cvssurn:baitaphish:normalized-source-record:v2:81425c6edf1c988596f6ac66e7dfffa0042ee829395c9a8e25ca57da2ff4f04a · sha256:62a3ed8ff2d6395c… · /containers/cna/metrics/0/cvssV4_0
CWE assertions
1 source assertion{"cweId":"CWE-522","description":"CWE-522: Insufficiently Protected Credentials","lang":"en","type":"CWE"}
- cve_program_cvelist_v5cweurn:baitaphish:normalized-source-record:v2:81425c6edf1c988596f6ac66e7dfffa0042ee829395c9a8e25ca57da2ff4f04a · sha256:62a3ed8ff2d6395c… · /containers/cna/problemTypes/0/descriptions/0
Source references
1 source assertion{"name":"https://github.com/anthropics/claude-code/security/advisories/GHSA-jh7p-qr78-84p7","tags":["x_refsource_CONFIRM"],"url":"https://github.com/anthropics/claude-code/security/advisories/GHSA-jh7p-qr78-84p7"}
- cve_program_cvelist_v5referenceurn:baitaphish:normalized-source-record:v2:81425c6edf1c988596f6ac66e7dfffa0042ee829395c9a8e25ca57da2ff4f04a · sha256:62a3ed8ff2d6395c… · /containers/cna/references/0
Attribution and limitations
- CVE Program CVEList V5: Reproduce the MITRE copyright designation and CVE license in copies. Source →
Provider severity values are preserved separately. Baitaphish does not convert them into a risk rating, infer affected products, or treat EPSS as observed exploitation.