CVE-2026-35021 — OS Command Injection in Claude Agent SDK FOR Python

CWE-78 — OS Command Injection2 documents2 sources
Severity
8.4HIGHNVD
EPSS
0.0%
top 90.45%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
2
Anthropic Claude Agent SDK FOR PythonAnthropic Claude Code
Timeline
PublishedApr 6

Description

Anthropic Claude Code CLI and Claude Agent SDK contain an OS command injection vulnerability in the prompt editor invocation utility that allows attackers to execute arbitrary commands by crafting malicious file paths. Attackers can inject shell metacharacters such as $() or backtick expressions into file paths that are interpolated into shell commands executed via execSync. Although the file path is wrapped in double quotes, POSIX shell semantics (POSIX §2.2.3) do not prevent command substituti…

CVSS vector

CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:A/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N

Affected Packages2 packages

▶CVEListV5anthropic/claude_code2.1.91

🔴Vulnerability Details

1
GHSA
GHSA-72p2-f44p-v65f: Anthropic Claude Code CLI and Claude Agent SDK contain an OS command injection vulnerability in the prompt editor invocation utility that allows attac↗2026-04-06
▶