Entrar Obtener clave API

Vulnerabilidades de anthropics claude-code-action (CVE)

Registros CVE publicados para anthropics claude-code-action, los más recientes primero. Siga el producto para recibir un correo con cada nueva.

1 resultados

5.3Media

CVE-2026-47751 hace 3 meses

Claude Code Action: Malicious MCP Server Configuration in PRs Enables Remote Code Execution and Secret Exfiltration

anthropics claude-code-action

Claude Code Action is a general-purpose GitHub action that runs Claude Code on GitHub pull requests and issues. Prior to 1.0.74, because the action checked out attacker-controlled pull request head branches, read .mcp.json from the working directory via defau…