Anthropic
22 known vulnerabilities
Top Products
Claude Code is an agentic coding tool. From 2.1.38 until 2.1.163, Claude Code's worktree handling allowed creation of w
Claude Code is an agentic coding tool. From 2.1.59 until 2.1.128, the Claude Code /copy command wrote responses to a ha
Claude Code is an agentic coding tool. From 0.2.54 until 2.1.163, because the hostname huggingface.co was pre-approved
The Claude Desktop app gives you Claude Code with a graphical interface built for running multiple sessions side by side
The Claude Desktop app gives you Claude Code with a graphical interface built for running multiple sessions side by side
In versions 2.1.63 through 2.1.83 of Claude Code, the folder trust determination logic used the git worktree commondir f
Claude SDK for TypeScript provides access to the Claude API from server-side TypeScript or JavaScript applications. From
Claude Code is an agentic coding tool. Prior to version 2.1.64, Claude Code's sandbox did not prevent sandboxed processe
Claude Code is an agentic coding tool. In versions prior to 2.1.75 on Windows, Claude Code loaded the system-wide defaul
The Claude SDK for Python provides access to the Claude API from Python applications. From version 0.86.0 to before vers
Claude SDK for TypeScript provides access to the Claude API from server-side TypeScript or JavaScript applications. From
The Claude SDK for Python provides access to the Claude API from Python applications. From version 0.86.0 to before vers
Uncontrolled search path elements in Anthropic Claude for Windows installer (Claude Setup.exe) versions prior to 1.1.336
Claude Code is an agentic coding tool. Versions prior to 2.1.53 resolved the permission mode from settings files, includ
Claude Code is an agentic coding tool. Prior to version 2.1.2, Claude Code's bubblewrap sandboxing mechanism failed to p
Claude Code is an agentic coding tool. Prior to version 2.1.7, Claude Code failed to strictly enforce deny rules configu
Claude Code is an agentic coding tool. Prior to version 2.0.55, Claude Code failed to properly validate commands using p
Claude Code is an agentic coding tool. Prior to version 2.0.57, Claude Code failed to properly validate directory change
Claude Code is an agentic coding tool. Prior to version 2.0.72, due to an error in command parsing, it was possible to b
Claude Code is an agentic coding tool. Prior to version 2.0.74, due to a Bash command validation flaw in parsing ZSH clo
Claude Code is an agentic coding tool. Prior to version 1.0.111, Claude Code contained insufficient URL validation in it
Claude Code is an agentic coding tool. Prior to version 2.0.65, vulnerability in Claude Code's project-load flow allowed
Frequently Asked Questions
How many CVEs affect Anthropic?
Anthropic has 22 CVE records in our database, including 4 critical and 10 high severity vulnerabilities.
What are the most severe Anthropic vulnerabilities?
Anthropic has 4 critical severity (CVSS 9.0+) and 10 high severity (CVSS 7.0-8.9) vulnerabilities. Review the list above sorted by publication date to find the most recent high-severity issues.
How can I scan for Anthropic vulnerabilities?
CyberStrike's AI-powered security agents automatically detect vulnerabilities in Anthropic products across your infrastructure. The platform provides continuous pentesting, DAST scanning, and real-time vulnerability monitoring with actionable remediation guidance.
Detect Anthropic Vulnerabilities
CyberStrike scans your infrastructure for Anthropic vulnerabilities and provides real-time remediation guidance.
Get Started