claude code vulnerabilities and fixes

Recent CVEs affecting claude code, with upgrade or downgrade steps. 3 tracked.

Also searched as: claudecode.

claude code has 3 tracked vulnerabilities, 1 critical. A fixed release or vendor patch exists for 3. Most recent: 2026-06-29. Highest priority: CVE-2026-54316 (score 48/100).

• CVE-2026-54316 CRITICAL 9.1 UPGRADE Claude Code is an agentic coding tool
• CVE-2026-55607 HIGH 8.8 UPGRADE Claude Code is an agentic coding tool
• CVE-2026-46406 MEDIUM 6.1 UPGRADE Claude Code is an agentic coding tool

FAQ

How do I fix claude code vulnerabilities?

Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.

Is claude code being exploited right now?

None of the tracked claude code CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.

Which claude code CVE should I patch first?

CVE-2026-54316 currently ranks highest (48/100): Claude Code is an agentic coding tool.

← Back to latest CVEs