Signal is active with 2 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
Claude HUD through 0.0.12, patched in commit 234d9aa, contains a command injection vulnerability that allows local attackers to execute arbitrary commands by manipulating the COMSPEC environment variable. Attackers can set COMSPEC to an arbitrary binary path before claude-hud performs its version check, causing execFile() to execute the attacker-supplied executable with cmd.exe arguments, resulting in arbitrary code execution on Windows systems.
Priority
LOW
Exploitation
NONE
PoC
NONE
Patch
AVAILABLE
Momentum
NONE
If you run products in this scope, you should treat this CVE as relevant to your environment.
CVE-2026-47092 Claude HUD through 0.0.12, patched in commit 234d9aa, contains a command injection vulnerability that allows local attackers to execute arbitrary commands by manipula… https://www.cve.org/CVERecord?id=CVE-2026-47092
Post summary
CVE-2026-47092 is a command injection flaw in Claude HUD up to 0.0.12, which has been addressed by patching in commit 234d9aa.
🚨*CVE* CVE-2026-47092 Claude HUD through 0.0.12, patched in commit 234d9aa, contains a command injection vulnerability that allows local attackers to execute arbitrary commands by manipula… https://www.cve.org/CVERecord?id=CVE-2026-47092 ----- Traducción: CVE-2026-47092 Cla… http://infoflow.cloud`
Post summary
CVE-2026-47092 is a command‑injection flaw in Claude HUD, now patched in commit 234d9aa; no PoC or active exploitation is reported.
1 of 1 entries
| Part | Vendor | Product | Version | Target SW | Target HW |
|---|---|---|---|---|---|
| App | jarrodwatts | claude_hud | - | claude_code | - |