CVEDB API

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2026-55607

Claude Code is an agentic coding tool. From 2.1.38 until 2.1.163, Claude Code's worktree handling allowed creation of worktrees named ".git" and navigation to worktrees outside the sandbox context, enabling git directory confusion attacks. By exploiting symlink manipulation and git fsmonitor execution during worktree operations, an attacker could overwrite files in the user's home directory (such as .zshenv), leading to code execution outside of seatbelt sandbox restrictions. Reliably exploiting this required the user to clone a malicious repository containing prompt injection content and run Claude Code against it. This vulnerability is fixed in 2.1.163.

Exploit prediction scoring system (EPSS) score

EPSS Score 0.007

EPSS Ranking 48.4%

CVSS Severity

CVSS v3 Score 8.8

References

https://github.com/anthropics/claude-code/security/advisories/GHSA-7835-87q9-rgvv

Products affected by CVE-2026-55607

Anthropic » Claude Code » Version: 2.1.100

cpe:2.3:a:anthropic:claude_code:2.1.100
Anthropic » Claude Code » Version: 2.1.101

cpe:2.3:a:anthropic:claude_code:2.1.101
Anthropic » Claude Code » Version: 2.1.104

cpe:2.3:a:anthropic:claude_code:2.1.104
Anthropic » Claude Code » Version: 2.1.105

cpe:2.3:a:anthropic:claude_code:2.1.105
Anthropic » Claude Code » Version: 2.1.107

cpe:2.3:a:anthropic:claude_code:2.1.107
Anthropic » Claude Code » Version: 2.1.108

cpe:2.3:a:anthropic:claude_code:2.1.108
Anthropic » Claude Code » Version: 2.1.109

cpe:2.3:a:anthropic:claude_code:2.1.109
Anthropic » Claude Code » Version: 2.1.110

cpe:2.3:a:anthropic:claude_code:2.1.110
Anthropic » Claude Code » Version: 2.1.111

cpe:2.3:a:anthropic:claude_code:2.1.111
Anthropic » Claude Code » Version: 2.1.112

cpe:2.3:a:anthropic:claude_code:2.1.112
Anthropic » Claude Code » Version: 2.1.113

cpe:2.3:a:anthropic:claude_code:2.1.113
Anthropic » Claude Code » Version: 2.1.114

cpe:2.3:a:anthropic:claude_code:2.1.114
Anthropic » Claude Code » Version: 2.1.116

cpe:2.3:a:anthropic:claude_code:2.1.116
Anthropic » Claude Code » Version: 2.1.117

cpe:2.3:a:anthropic:claude_code:2.1.117
Anthropic » Claude Code » Version: 2.1.118

cpe:2.3:a:anthropic:claude_code:2.1.118
Anthropic » Claude Code » Version: 2.1.119

cpe:2.3:a:anthropic:claude_code:2.1.119
Anthropic » Claude Code » Version: 2.1.120

cpe:2.3:a:anthropic:claude_code:2.1.120
Anthropic » Claude Code » Version: 2.1.121

cpe:2.3:a:anthropic:claude_code:2.1.121
Anthropic » Claude Code » Version: 2.1.122

cpe:2.3:a:anthropic:claude_code:2.1.122
Anthropic » Claude Code » Version: 2.1.123

cpe:2.3:a:anthropic:claude_code:2.1.123
Anthropic » Claude Code » Version: 2.1.126

cpe:2.3:a:anthropic:claude_code:2.1.126
Anthropic » Claude Code » Version: 2.1.128

cpe:2.3:a:anthropic:claude_code:2.1.128
Anthropic » Claude Code » Version: 2.1.129

cpe:2.3:a:anthropic:claude_code:2.1.129
Anthropic » Claude Code » Version: 2.1.131

cpe:2.3:a:anthropic:claude_code:2.1.131
Anthropic » Claude Code » Version: 2.1.132

cpe:2.3:a:anthropic:claude_code:2.1.132
Anthropic » Claude Code » Version: 2.1.133

cpe:2.3:a:anthropic:claude_code:2.1.133
Anthropic » Claude Code » Version: 2.1.136

cpe:2.3:a:anthropic:claude_code:2.1.136
Anthropic » Claude Code » Version: 2.1.137

cpe:2.3:a:anthropic:claude_code:2.1.137
Anthropic » Claude Code » Version: 2.1.138

cpe:2.3:a:anthropic:claude_code:2.1.138
Anthropic » Claude Code » Version: 2.1.139

cpe:2.3:a:anthropic:claude_code:2.1.139
Anthropic » Claude Code » Version: 2.1.140

cpe:2.3:a:anthropic:claude_code:2.1.140
Anthropic » Claude Code » Version: 2.1.141

cpe:2.3:a:anthropic:claude_code:2.1.141
Anthropic » Claude Code » Version: 2.1.142

cpe:2.3:a:anthropic:claude_code:2.1.142
Anthropic » Claude Code » Version: 2.1.143

cpe:2.3:a:anthropic:claude_code:2.1.143
Anthropic » Claude Code » Version: 2.1.144

cpe:2.3:a:anthropic:claude_code:2.1.144
Anthropic » Claude Code » Version: 2.1.145

cpe:2.3:a:anthropic:claude_code:2.1.145
Anthropic » Claude Code » Version: 2.1.146

cpe:2.3:a:anthropic:claude_code:2.1.146
Anthropic » Claude Code » Version: 2.1.147

cpe:2.3:a:anthropic:claude_code:2.1.147
Anthropic » Claude Code » Version: 2.1.148

cpe:2.3:a:anthropic:claude_code:2.1.148
Anthropic » Claude Code » Version: 2.1.149

cpe:2.3:a:anthropic:claude_code:2.1.149
Anthropic » Claude Code » Version: 2.1.150

cpe:2.3:a:anthropic:claude_code:2.1.150
Anthropic » Claude Code » Version: 2.1.152

cpe:2.3:a:anthropic:claude_code:2.1.152
Anthropic » Claude Code » Version: 2.1.153

cpe:2.3:a:anthropic:claude_code:2.1.153
Anthropic » Claude Code » Version: 2.1.154

cpe:2.3:a:anthropic:claude_code:2.1.154
Anthropic » Claude Code » Version: 2.1.156

cpe:2.3:a:anthropic:claude_code:2.1.156
Anthropic » Claude Code » Version: 2.1.157

cpe:2.3:a:anthropic:claude_code:2.1.157
Anthropic » Claude Code » Version: 2.1.158

cpe:2.3:a:anthropic:claude_code:2.1.158
Anthropic » Claude Code » Version: 2.1.159

cpe:2.3:a:anthropic:claude_code:2.1.159
Anthropic » Claude Code » Version: 2.1.160

cpe:2.3:a:anthropic:claude_code:2.1.160
Anthropic » Claude Code » Version: 2.1.161

cpe:2.3:a:anthropic:claude_code:2.1.161
Anthropic » Claude Code » Version: 2.1.162

cpe:2.3:a:anthropic:claude_code:2.1.162
Anthropic » Claude Code » Version: 2.1.38

cpe:2.3:a:anthropic:claude_code:2.1.38
Anthropic » Claude Code » Version: 2.1.39

cpe:2.3:a:anthropic:claude_code:2.1.39
Anthropic » Claude Code » Version: 2.1.41

cpe:2.3:a:anthropic:claude_code:2.1.41
Anthropic » Claude Code » Version: 2.1.42

cpe:2.3:a:anthropic:claude_code:2.1.42
Anthropic » Claude Code » Version: 2.1.44

cpe:2.3:a:anthropic:claude_code:2.1.44
Anthropic » Claude Code » Version: 2.1.45

cpe:2.3:a:anthropic:claude_code:2.1.45
Anthropic » Claude Code » Version: 2.1.47

cpe:2.3:a:anthropic:claude_code:2.1.47
Anthropic » Claude Code » Version: 2.1.49

cpe:2.3:a:anthropic:claude_code:2.1.49
Anthropic » Claude Code » Version: 2.1.50

cpe:2.3:a:anthropic:claude_code:2.1.50
Anthropic » Claude Code » Version: 2.1.51

cpe:2.3:a:anthropic:claude_code:2.1.51
Anthropic » Claude Code » Version: 2.1.52

cpe:2.3:a:anthropic:claude_code:2.1.52
Anthropic » Claude Code » Version: 2.1.53

cpe:2.3:a:anthropic:claude_code:2.1.53
Anthropic » Claude Code » Version: 2.1.55

cpe:2.3:a:anthropic:claude_code:2.1.55
Anthropic » Claude Code » Version: 2.1.56

cpe:2.3:a:anthropic:claude_code:2.1.56
Anthropic » Claude Code » Version: 2.1.58

cpe:2.3:a:anthropic:claude_code:2.1.58
Anthropic » Claude Code » Version: 2.1.59

cpe:2.3:a:anthropic:claude_code:2.1.59
Anthropic » Claude Code » Version: 2.1.61

cpe:2.3:a:anthropic:claude_code:2.1.61
Anthropic » Claude Code » Version: 2.1.62

cpe:2.3:a:anthropic:claude_code:2.1.62
Anthropic » Claude Code » Version: 2.1.63

cpe:2.3:a:anthropic:claude_code:2.1.63
Anthropic » Claude Code » Version: 2.1.64

cpe:2.3:a:anthropic:claude_code:2.1.64
Anthropic » Claude Code » Version: 2.1.66

cpe:2.3:a:anthropic:claude_code:2.1.66
Anthropic » Claude Code » Version: 2.1.68

cpe:2.3:a:anthropic:claude_code:2.1.68
Anthropic » Claude Code » Version: 2.1.69

cpe:2.3:a:anthropic:claude_code:2.1.69
Anthropic » Claude Code » Version: 2.1.70

cpe:2.3:a:anthropic:claude_code:2.1.70
Anthropic » Claude Code » Version: 2.1.71

cpe:2.3:a:anthropic:claude_code:2.1.71
Anthropic » Claude Code » Version: 2.1.72

cpe:2.3:a:anthropic:claude_code:2.1.72
Anthropic » Claude Code » Version: 2.1.73

cpe:2.3:a:anthropic:claude_code:2.1.73
Anthropic » Claude Code » Version: 2.1.74

cpe:2.3:a:anthropic:claude_code:2.1.74
Anthropic » Claude Code » Version: 2.1.75

cpe:2.3:a:anthropic:claude_code:2.1.75
Anthropic » Claude Code » Version: 2.1.76

cpe:2.3:a:anthropic:claude_code:2.1.76
Anthropic » Claude Code » Version: 2.1.77

cpe:2.3:a:anthropic:claude_code:2.1.77
Anthropic » Claude Code » Version: 2.1.78

cpe:2.3:a:anthropic:claude_code:2.1.78
Anthropic » Claude Code » Version: 2.1.79

cpe:2.3:a:anthropic:claude_code:2.1.79
Anthropic » Claude Code » Version: 2.1.80

cpe:2.3:a:anthropic:claude_code:2.1.80
Anthropic » Claude Code » Version: 2.1.81

cpe:2.3:a:anthropic:claude_code:2.1.81
Anthropic » Claude Code » Version: 2.1.83

cpe:2.3:a:anthropic:claude_code:2.1.83
Anthropic » Claude Code » Version: 2.1.84

cpe:2.3:a:anthropic:claude_code:2.1.84
Anthropic » Claude Code » Version: 2.1.85

cpe:2.3:a:anthropic:claude_code:2.1.85
Anthropic » Claude Code » Version: 2.1.86

cpe:2.3:a:anthropic:claude_code:2.1.86
Anthropic » Claude Code » Version: 2.1.87

cpe:2.3:a:anthropic:claude_code:2.1.87
Anthropic » Claude Code » Version: 2.1.88

cpe:2.3:a:anthropic:claude_code:2.1.88
Anthropic » Claude Code » Version: 2.1.89

cpe:2.3:a:anthropic:claude_code:2.1.89
Anthropic » Claude Code » Version: 2.1.90

cpe:2.3:a:anthropic:claude_code:2.1.90
Anthropic » Claude Code » Version: 2.1.91

cpe:2.3:a:anthropic:claude_code:2.1.91
Anthropic » Claude Code » Version: 2.1.92

cpe:2.3:a:anthropic:claude_code:2.1.92
Anthropic » Claude Code » Version: 2.1.94

cpe:2.3:a:anthropic:claude_code:2.1.94
Anthropic » Claude Code » Version: 2.1.96

cpe:2.3:a:anthropic:claude_code:2.1.96
Anthropic » Claude Code » Version: 2.1.97

cpe:2.3:a:anthropic:claude_code:2.1.97
Anthropic » Claude Code » Version: 2.1.98

cpe:2.3:a:anthropic:claude_code:2.1.98

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2026-55607

Products

Pricing

Contact Us