Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1000 CNY

100.0%

Anthropic — Vulnerabilities & Security Advisories 6

Browse all 6 CVE security advisories affecting Anthropic. AI-powered Chinese analysis, POCs, and references for each vulnerability.

Anthropic develops AI safety research and large language models, focusing on responsible AI deployment. Historically, vulnerabilities across their systems have included remote code execution, cross-site scripting, and privilege escalation, though the six recorded CVEs suggest relatively few publicly disclosed issues. The organization emphasizes safety by design, implementing rigorous testing protocols and constitutional AI principles. No major security incidents have been widely reported, reflecting their focus on preventive measures. Their approach combines technical safeguards with ongoing research to mitigate potential risks, though the evolving nature of AI systems presents continuous security challenges that require adaptive defense strategies.

Found 3 results / 6Clear Filters
High2026-04-02
fix(memory): return resolved path from async _validate_path · anthropics/anthropic-sdk-python@6599043 · GitHub
High2026-04-02
Memory Tool Path Validation Allows Sandbox Escape to Sibling Directories · Advisory · anthropics/anthropic-sdk-typescrip
Critical2026-04-02
Memory Tool Path Validation Race Condition Allows Sandbox Escape · Advisory · anthropics/anthropic-sdk-python · GitHub
MediumCVE-2026-344302026-04-02
Insecure Default File Permissions in Local Filesystem Memory Tool · Advisory · anthropics/anthropic-sdk-python · GitHub
HighCVE-2026-257232026-02-07
Command Injection via Piped sed Command Bypasses File Write Restrictions · Advisory · anthropics/claude-code · GitHub
LowCVE-2026-257242026-02-07
Permission Deny Bypass Through Symbolic Links · Advisory · anthropics/claude-code · GitHub
HighCVE-2025-647552025-11-21
Sed Command Validation Bypass Allows Arbitrary File Writes · Advisory · anthropics/claude-code · GitHub
HighCVE-2025-650992025-11-20
Command execution prior to Claude Code startup trust dialog · Advisory · anthropics/claude-code · GitHub
LowCVE-2025-598292025-10-04
Permission deny bypass through symlink · Advisory · anthropics/claude-code · GitHub
HighCVE-2025-590412025-09-11
Claude Code vulnerable to arbitrary code execution caused by maliciously configured git email · Advisory · anthropics/cl
HighCVE-2025-552842025-08-17
Permissive Default Allowlist Enables Unauthorized File Read and Network Exfiltration in Claude Code · Advisory · anthrop

Showing up to 20 recent security advisories. View all →

This page lists every published CVE security advisory associated with Anthropic. Each entry links to a detailed page with CVSS scoring, CWE classification, affected products and references. AI-generated Chinese analysis is provided for fast triage.