漏洞信息
尽管我们使用了先进的大模型技术，但其输出仍可能包含不准确或过时的信息。神龙努力确保数据的准确性，但请您根据实际情况进行核实和判断。
Vulnerability Title
Claude Code has a Command Injection in find Command Bypasses User Approval Prompt
Vulnerability Description
Claude Code is an agentic coding tool. Prior to version 2.0.72, due to an error in command parsing, it was possible to bypass the Claude Code confirmation prompt to trigger execution of untrusted commands through the find command. Reliably exploiting this required the ability to add untrusted content into a Claude Code context window. This issue has been patched in version 2.0.72.
CVSS Information
N/A
Vulnerability Type
OS命令中使用的特殊元素转义处理不恰当(OS命令注入)
Vulnerability Title
Claude Code 代码注入漏洞
Vulnerability Description
Claude Code是Anthropic开源的一个终端原生AI编程工具。 Claude Code 2.0.72之前版本存在代码注入漏洞，该漏洞源于命令解析错误，可能导致绕过确认提示并通过find命令执行不受信任的命令。
CVSS Information
N/A
Vulnerability Type
N/A