CVE-2026-21852

Claude Code is an agentic coding tool. Prior to version 2.0.65, vulnerability in Claude Code's project-load flow allowed malicious repositories to exfiltrate data including Anthropic API keys before users confirmed trust. An attacker-controlled repository could include a settings file that sets ANTHROPIC_BASE_URL to an attacker-controlled endpoint and when the repository was opened, Claude Code would read the configuration and immediately issue API requests before showing the trust prompt, potentially leaking the user's API keys. Users on standard Claude Code auto-update have received this fix already. Users performing manual updates are advised to update to version 2.0.65, which contains a patch, or to the latest version.

• CWE-522

• https://github.com/anthropics/claude-code/security/advisories/GHSA-jh7p-qr78-84p7Vendor Advisory

Published

Jan 21, 2026

Last Modified

Jun 17, 2026

Status

Analyzed

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2026-21836The HCL DominoIQ RAG feature is affected by a Broken Access …6.5
• CVE-2026-21837HCL Digital Experience is affected by an OS command injectio…8.8
• CVE-2026-2184A vulnerability was detected in Great Developers Certificate…9.8
• CVE-2026-21840HCL BigFix Platform is affected by a user enumeration vulner…3.1
• CVE-2026-2185A flaw has been found in Tenda RX3 16.03.13.11. This issue a…8.8
• CVE-2026-21851MONAI (Medical Open Network for AI) is an AI toolkit for hea…5.3
• CVE-2026-21853AFFiNE is an open-source, all-in-one workspace and an operat…8.8
• CVE-2026-21854The Tarkov Data Manager is a tool to manage the Tarkov item …9.8
• CVE-2026-21855The Tarkov Data Manager is a tool to manage the Tarkov item …6.1
• CVE-2026-21856The Tarkov Data Manager is a tool to manage the Tarkov item …8.8
• CVE-2026-21857REDAXO is a PHP-based content management system. Prior to ve…6.5
• CVE-2026-21858n8n is an open source workflow automation platform. Versions…10