Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1359 CNY

100%
Buy Us a Coffee

CVE-2026-88066— Claude Desktop: Uncontrolled Search Path Enables Arbitrary Code Execution via Malicious Git Executable

Quick assessment

Affected
anthropics claude-code
Exploitation
No confirmed in-the-wild exploitation; assess based on exposure
Recommended action
Check the vendor advisory and references for a fixed version. If immediate upgrade is impossible, restrict exposure and increase monitoring.

Claude Desktop 是 Anthropic 推出的用于与 Claude 交互的桌面应用程序。在版本 1.8089.0 之前，Windows 版 Claude Desktop 在通过 调用 时未使用绝对路径，这导致 Windows 的路径搜索机制可能优先选择位于已打开项目当前工作目录中的恶意 ，而非预期的系统可执行文件。因此，打开由攻击者控制或共享的仓库时，可能会以当前用户的权限执行被替换的程序。该问题已在版本 1.8089.0 中修复。

CVSS 7.5 · High
Get alerts for future matching vulnerabilities Log in to subscribe

I. Basic Information for CVE-2026-88066

Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗

Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.

Vulnerability Title
Claude Desktop: Uncontrolled Search Path Enables Arbitrary Code Execution via Malicious Git Executable
Source: CVE Program / CVE List V5
Vulnerability Description
Claude Desktop is Anthropic's desktop application for interacting with Claude. Prior to 1.8089.0, Claude Desktop on Windows invokes git.exe through uv_spawn without an absolute path, allowing Windows search-path resolution to select a malicious git.exe placed in the opened project's current working directory before the intended system executable. Opening an attacker-controlled or shared repository can therefore execute the substituted program with the user's privileges. This issue is fixed in version 1.8089.0.
Source: CVE Program / CVE List V5
CVSS Information
CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:A/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
Source: CVE Program / CVE List V5
Vulnerability Type
对搜索路径元素未加控制
Source: CVE Program / CVE List V5

Affected Products

Vendor Product Affected Versions CPE Subscribe
anthropics claude-code < 1.8089.0 -

II. Public POCs for CVE-2026-88066

# POC Description Source Link Shenlong Link
AI-Generated POC Premium

No public POC found.

Login to generate AI POC

III. Intelligence Information for CVE-2026-88066

请登录查看更多情报信息。

Other References for CVE-2026-88066 (1)

IV. Related Vulnerabilities

Same product: claude-code
Same vendor: anthropics
Same weakness: CWE-427