Track vulnerabilities like this one.
Sign up free to get alerted when software you use is affected.
7.5
CVE-2026-86063: Claude Code may install malicious plugin code
CVE-2026-86063 · published today
Summary
Claude Code and Claude Desktop can load a plugin from a source that pretends to be the exact version you locked down, but actually pulls the attacker’s code. This could let a malicious plugin run on your system without your knowing. Make sure you are running the latest version – the auto‑update version already includes the fix, and anyone who updates manually should install the newest release as soon as possible.
What to do
- Update anthropic-ai claude-code to version 2.1.179.
Affected software
| Ecosystem | Vendor | Product | Affected versions |
|---|---|---|---|
| – | anthropics | claude-code | < 2.1.179 |
| npm | anthropic-ai | claude-code |
< 2.1.179 Fix: upgrade to 2.1.179
|
Original advisory text
Claude Code: Plugin Hash Pin Bypass Allows Bypass of Hash Pinning
The plugin install flow in Claude Code and Claude Desktop checked out a marketplace's pinned commit SHA using `git checkout` without verifying that the resulting HEAD matched the pinned SHA. An attacker controlling a plugin's upstream repository could create a branch named identically to the pinned 40-character SHA, causing the checkout to silently resolve to the attacker's branch tip instead of the reviewed commit, resulting in attacker-controlled code being installed bypassing the pinned hash. Exploitation required a user to install a malicious plugin, pin to a safe hash, and for the plugin source to be hosted on a git host that permitted SHA-shaped branch names.
Users on standard Claude Code auto-update have received this fix already. Users performing manual updates are advised to update to the latest version.
Thank you to Or Nevo Michrowski of Air Security for reporting this issue.
Users on standard Claude Code auto-update have received this fix already. Users performing manual updates are advised to update to the latest version.
Thank you to Or Nevo Michrowski of Air Security for reporting this issue.
References
- https://github.com/anthropics/claude-code/releases/tag/v2.1.179
- https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/86xxx/CVE-2026-86063... Vendor Advisory
- https://github.com/anthropics/claude-code/security/advisories/GHSA-pq7j-f95f-qfc...
- https://nvd.nist.gov/vuln/detail/CVE-2026-86063
- https://github.com/advisories/GHSA-pq7j-f95f-qfcv
Internet-facing
14 days
Internal
At next upgrade
- Not known to be exploited
- Needs hands-on effort to exploit
- Gives an attacker full control
Type
CWE-494Download of Code Without Integrity Check
CWE-829Inclusion of Functionality from Untrusted Control Sphere
Timeline
Published15 Oct 2026
Updated15 Oct 2026
First seen13 Oct 2026
Track software like this
Free during beta