Claude Code Flaws Allow Remote Code Execution and API Key Exfiltration
Check Point researchers Aviv Donenfeld and Oded Vanunu disclosed vulnerabilities in Anthropic's Claude Code that execute arbitrary shell commands and exfiltrate Anthropic API keys when users clone and open untrusted repositories. In CVE-2026-21852, a...