CVE-2025-59536 2

Vulnerability (CVE)

Claude Code Flaws Allow Remote Code Execution and API Key Exfiltration

Check Point researchers Aviv Donenfeld and Oded Vanunu disclosed vulnerabilities in Anthropic's Claude Code that execute arbitrary shell commands and exfiltrate Anthropic API keys when users clone and open untrusted repositories. In CVE-2026-21852, a...

Vulnerabilities & Patching

Amazon Q Developer Flaw Could Let Malicious Repos Run Code via MCP Configs

Cyber Risks The Hacker News

A high-severity flaw in Amazon Q Developer, tracked as CVE-2026-12957 with a CVSS score of 8.5, let a malicious repository run commands and steal a developer's cloud credentials by having the assistant read an MCP configuration file, .amazonq/mcp.json,...

Vulnerabilities & Patching