DailyCVE@dailycve
🔴 anthropics/claude-code, Plugin Hash Pin Bypass, #CVE-2026-86063 High -DC-Oct2026-3268 https://dailycve.com/anthropics-claude-code-plugin-hash-pin-bypass-cve-2026-86063-high-dc-oct2026-3268/
0000021
242 followersView on X
CVE-2026-86063
LOWCVSS 7.5 · HIGHSignal is active with 1 mentions in latest observed window
Immediate actions
- Track advisory updates for patch or workaround availability
Recommended action window: Monitor and triage in normal cycle
NVD description
Claude Code is an agentic coding tool. Prior to 2.1.179, the Claude Code and Claude Desktop plugin installation flow runs git checkout for a marketplace-pinned commit without verifying that the resulting HEAD equals the pinned 40-character SHA. An attacker who controls a plugin repository on a Git host that permits SHA-shaped branch names can create a branch named after the reviewed commit, causing checkout to select the branch tip and install attacker-controlled plugin code. Exploitation requires a user to install the malicious plugin and pin it to the ostensibly safe hash. This issue is fixed in version 2.1.179.
0.0/ 10 priority
Sources & remediation
Other references
Weakness type (CWE)
CWE-494CWE-829
Priority
LOW
Exploitation
NONE
PoC
NONE
Patch
NONE
Momentum
NONE
Threat summary
- 1 mentions across 1 observed day
What's happening
- 1 total mentions across 1 day