Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
Claude Code CLI和Claude Agent SDK 操作系统命令注入漏洞
Vulnerability Description
Claude Code CLI和Claude Agent SDK都是Anthropic开源的产品。Claude Code CLI是一个命令行AI编码助手工具。Claude Agent SDK是一个AI编码助手开发者工具包。 Claude Code CLI和Claude Agent SDK存在操作系统命令注入漏洞,该漏洞源于提示编辑器调用实用程序中的操作系统命令注入,可能导致攻击者通过制作恶意文件路径执行任意命令。
CVSS Information
N/A
Vulnerability Type
N/A