Exploit discussion active in current signal (1 latest mentions)
Recommended action window: High priority (within 72h)
NVD description
The Claude Desktop app gives you Claude Code with a graphical interface built for running multiple sessions side by side. From 1.2581.0 to before 1.4304.0, Claude Desktop's SSH remote development feature verified only whether a hostname existed in ~/.ssh/known_hosts without comparing the server's presented host key against the stored key. This allowed a network-positioned attacker to present an arbitrary SSH host key and have the connection silently accepted, enabling a man-in-the-middle attack on remote development sessions. Successful exploitation required the attacker to be in a network position to intercept SSH traffic (e.g., via ARP spoofing, rogue Wi-Fi, or DNS poisoning) and the target hostname to already have an entry in the victim's known_hosts file. This vulnerability is fixed in 1.4304.0.
Priority
LOW
Exploitation
NONE
PoC
YES
Patch
NONE
Momentum
STABLE
If you run products in this scope, you should treat this CVE as relevant to your environment.
| Date | Total | Labels |
|---|
| 2026-05-07 | 1 | Disclosure1 |
| 2026-05-08 | 4 | Disclosure3General1 |
| 2026-05-09 | 1 | Disclosure1 |
Claude DesktopのSSH機能に潜んでいたMITM脆弱性を見つけた話（CVE-2026-44467）｜masa42 https://zenn.dev/aeyesec/articles/0aa59f113a702b #zenn
Post summary
The author reports discovering a MITM vulnerability (CVE-2026-44467) in Claude Desktop’s SSH feature, providing the initial disclosure but no exploit, patch, or active exploitation details.
Claude DesktopのSSH機能に潜んでいたMITM脆弱性を見つけた話（CVE-2026-44467） https://zenn.dev/aeyesec/articles/0aa59f113a702b
Post summary
The article announces the discovery of a MITM vulnerability in Claude Desktop’s SSH feature (CVE‑2026‑44467), providing a basic technical description but no PoC, exploit code, active exploitation evidence, or remediation details.
I reported a MITM vulnerability in Claude Desktop, which has now been published as CVE-2026-44467. It's a classic vulnerability caused by improper SSH host key verification. https://github.com/anthropics/claude-code/security/advisories/GHSA-3rwf-2g6p-c2f9 #CVE #Claude
Post summary
A MITM vulnerability in Claude Desktop (CVE‑2026‑44467) caused by improper SSH host key verification was reported and shared in a GitHub advisory, but no exploit code, patch, or active exploitation details are provided.
🔐 Claude DesktopのSSH機能にMITM脆弱性（CVE-2026-44467） 日本人研究者が発見。AIツールのSSH接続でサーバー認証が不十分なため、中間者攻撃が可能な状態だった。AIにSSHを使わせる前に必読。 https://is.gd/Er3El4 #セキュリティ #AI
Post summary
A new MITM vulnerability (CVE-2026-44467) was discovered in Claude Desktop’s SSH feature due to inadequate server authentication.
📑 Claude DesktopのSSH機能に潜んでいたMITM脆弱性を見つけた話（CVE-2026-44467） 🅱 はてなブックマーク テクノロジー新着 より https://zenn.dev/aeyesec/articles/0aa59f113a702b
Post summary
A MITM vulnerability (CVE-2026-44467) was identified in Claude Desktop's SSH feature, but the post offers no details on exploits, patches, or active use.
Claude Desktopの脆弱性（CVE-2026-44467）の詳細解説記事を書きました。 Claude DesktopのSSH機能に潜んでいたMITM脆弱性を見つけた話（CVE-2026-44467）｜masa42 https://zenn.dev/aeyesec/articles/0aa59f113a702b #zenn
Post summary
The article gives a detailed explanation of a MITM vulnerability in Claude Desktop’s SSH function (CVE-2026-44467).
1 of 1 entries
| Part | Vendor | Product | Version | Target SW | Target HW |
|---|---|---|---|---|---|
| App | anthropic | claude_desktop | - | - | - |