Is CVE-2026-35021 actively exploited?

No active exploitation of CVE-2026-35021 has been confirmed so far. Continue monitoring, as exploit status can change.

Can CVE-2026-35021 be exploited remotely?

No. CVE-2026-35021 requires local access to exploit.

What is the CVSS score of CVE-2026-35021?

CVE-2026-35021 has a CVSS score of 7.8 (HIGH).

HOME VULNERABILITIESCVE-2026-35021

HIGH

CVE-2026-35021

CWE-78Published: April 6, 2026· Updated: Apr 7, 2026

7.8

CVSS v3.1

EPSS:0.03%probability of exploitation in 30 daysPercentile:8.1th

Official Description

Anthropic Claude Code CLI and Claude Agent SDK contain an OS command injection vulnerability in the prompt editor invocation utility that allows attackers to execute arbitrary commands by crafting malicious file paths. Attackers can inject shell metacharacters such as $() or backtick expressions into file paths that are interpolated into shell commands executed via execSync. Although the file path is wrapped in double quotes, POSIX shell semantics (POSIX §2.2.3) do not prevent command substitution within double quotes, allowing injected expressions to be evaluated and resulting in arbitrary command execution with the privileges of the user running the CLI.

NVD Source

Technical Analysis

CVE-2026-35021 requires local access, meaning attackers must already have a foothold on the target system.

Exploitation does not require any privileges, though user interaction (Required) is needed, which slightly reduces the risk of mass automated attacks.

A successful exploit results in complete confidentiality breach (data exposure), full integrity compromise (data manipulation), availability disruption (denial of service), with a CVSS base score of 7.8.