CVE-2026-103012
一分钟漏洞结论
影响对象
Anthropic @anthropic-ai/claude-code
利用判断
尚无明确在野利用证据，仍需结合暴露面评估
建议动作
优先检查厂商安全公告和参考链接中的修复版本；无法立即升级时，限制受影响服务暴露并加强监测。
Claude Code 在获取组织的服务器托管设置时，优先使用了由 Claude Code 存储的 API 密钥（例如来自之前的 命令或直接写入其配置文件中的密钥），而非用户当前有效的 Claude Enterprise 或 Team 登录凭证，尽管该会话本身是以 Enterprise 或 Team 账户身份进行认证的。当设置端点拒绝该存储的 API 密钥时，会话将在未加载组织服务器托管策略（例如权限拒绝规则、模型限制以及仅限托管的锁定设置）的情况下启动；或者，如果机器上存在先前缓存的设置副本，则会继续应用该过时的
获取后续新漏洞提醒
登录后订阅
一、 漏洞 CVE-2026-103012 基础信息
漏洞信息
对漏洞内容有疑问？看看神龙的深度分析是否有帮助！
查看神龙十问 ↗
尽管我们使用了先进的大模型技术，但其输出仍可能包含不准确或过时的信息。神龙努力确保数据的准确性，但请您根据实际情况进行核实和判断。
Vulnerability Title
N/A
来源: CVE Program / CVE List V5
Vulnerability Description
Claude Code selected an API key stored by Claude Code, for example from an earlier `/login` or written directly to its configuration, ahead of the user's valid Claude Enterprise or Team sign-in when fetching the organization's server-managed settings, even though the session itself authenticated with the Enterprise or Team account. When the settings endpoint rejected that stored key, the session started without the organization's server-managed policy (such as permission deny rules, model restrictions and managed-only locks) or, if a previously cached copy existed on the machine, kept applying that stale copy without receiving later policy changes — while continuing to operate as the organization's account. Triggering this required local access to a device with such a stored API key; the no-policy case additionally required that no managed settings had previously been cached. Endpoint-managed (MDM or file-based) settings were not affected. Claude for Enterprise organizations were affected from version 2.0.68; Claude for Work (Team) organizations from version 2.1.38, when server-managed settings became available to them.
Users on standard Claude Code auto-update have received this fix already. Users performing manual updates are advised to update to version 2.1.260 or later.
Thank you to Tamas Voros / NVIDIA AI Red Team for reporting this issue.
来源: CVE Program / CVE List V5
CVSS Information
CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N
来源: CVE Program / CVE List V5
Vulnerability Type
不正确的行为次序
来源: CVE Program / CVE List V5
受影响产品
| 厂商 | 产品 | 影响版本 | CPE | 订阅 |
|---|---|---|---|---|
| Anthropic | @anthropic-ai/claude-code | 2.0.68 ~ 2.1.260 | - |
|
二、漏洞 CVE-2026-103012 的公开POC
| # | POC 描述 | 源链接 | 神龙链接 |
|---|
AI 生成 POC
高级
未找到公开 POC。
登录以生成 AI POC三、漏洞 CVE-2026-103012 的情报信息
请登录查看更多情报信息。
CVE-2026-103012 其他参考 (1)
IV. Related Vulnerabilities
V. Comments for CVE-2026-103012
暂无评论