GitHub Actions PR CVE: Arbitrary Code Execution via .claude and .mcp.json Files

github.com 2026-07-17查看中文 →

Security AdvisoryUnknownAnthropic

Affected:

claude-code-action

Referenced CVEs: CVE-2026-47751

文章内图片已隐藏以节省流量 · Upgrade to Pro to view images & offline archive

This content was auto-fetched from github.com, cleaned by our LLM pipeline, and translated to English. View original.

More from this source

OpenRemote Unauthenticated Console Registration Asset Takeover 2026-07-25 SiYuan v3.7.1 Unauthenticated MCP Tool Privilege Escalation and File Read Vulnerability 2026-07-25 Redis Stream RDB Corruption Fix: Shared NACK Data Structure Validation 2026-07-25 Redis Multiple Versions RCE Analysis (CVE-2026-25243/25589) and POC Exploits 2026-07-25 Knot Resolver 6.3.0 DoQ Heap Buffer Overflow RCE Vulnerability and PoC 2026-07-25

Offline Archive

Offline screenshot & PDF are Pro-exclusive