Anthropic Claude Code 0.2.54 < 2.1.163 Data Exfiltration (CVE-2026-54316)

medium Nessus Plugin ID 322792

Language:

Synopsis

An application installed on the remote host is affected by a data exfiltration vulnerability.

Description

The version of Anthropic Claude Code installed on the remote host is 0.2.54 prior to 2.1.163. It is, therefore, affected by a data exfiltration vulnerability.

- Because the hostname huggingface.co was pre-approved as a bare hostname for the WebFetch tool, any path on that domain including attacker-controlled model repositories was auto-approved without a permission prompt or being subject to --allowedTools restrictions.
An attacker able to inject untrusted content into a Claude Code context could direct it to issue WebFetch requests against attacker-controlled repository files, which HuggingFace counts as downloads server-side, creating a covert out-of-band channel for encoding and exfiltrating data Claude can access such as files, environment variables, or command output. Reliably exploiting this required the ability to add untrusted content into a Claude Code context window. (CVE-2026-54316)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

Solution

Upgrade Anthropic Claude Code to version 2.1.163 or later.

Plugin Details

Severity: Medium

ID: 322792

File Name: anthropic_claude_code_CVE-2026-54316.nasl

Version: 1.5

Type: Local

Agent: windows, macosx, unix

Family: Misc.

Published: 6/25/2026

Updated: 7/2/2026

Configuration: Enable thorough checks (optional)

Supported Sensors: Nessus Agent, Nessus

Risk Information

VPR

Risk Factor: Medium

Score: 4.3

Percentile: 53.64

CVSS v2

Risk Factor: High

Base Score: 9.4

Temporal Score: 7

Vector: CVSS2#AV:N/AC:L/Au:N/C:C/I:C/A:N

CVSS Score Source: CVE-2026-54316

CVSS v3

Risk Factor: Critical

Base Score: 9.1

Temporal Score: 7.9

Vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N

Temporal Vector: CVSS:3.0/E:U/RL:O/RC:C

CVSS v4

Risk Factor: Medium

Base Score: 6

Threat Score: 2.3

Threat Vector: CVSS:4.0/E:U

Vector: CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:P/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N

Vulnerability Information

CPE: cpe:/a:anthropic:claude_code

Required KB Items: installed_sw/Anthropic Claude Code

Exploit Ease: No known exploits are available

Patch Publication Date: 6/13/2026

Vulnerability Publication Date: 6/13/2026

Reference Information

CVE: CVE-2026-54316

IAVA: 2026-A-0624

Detections

Analytics