Anthropic Claude Code 0.2.54 < 2.1.163 Data Exfiltration (CVE-2026-54316)

Language:

Version 1.5 Jul 2, 2026, 3:38 PM CVSS metrics ("CVSSv2 score" set to 9.4) CVSS metrics ("CVSSv2 vector" set to "CVSS2#AV:N/AC:L/Au:N/C:C/I:C/A:N") CVSS metrics ("CVSSv3 score" set to 9.1) CVSS metrics ("CVSSv3 vector" set to "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N") CVSSv2 severity (based on CVE-2026-54316, severity increased from "Medium" to "High") Plugin Feed: 202607021538
Version 1.4 Jun 29, 2026, 10:30 AM CVSS metrics ("Cvssv4 threat score" set to 6.0) Plugin Feed: 202606291030
Version 1.3 Jun 26, 2026, 4:08 PM CVSS metrics ("Cvssv4 threat vector" set to "CVSS:4.0/E:U") CVSS temporal metrics ("CVSSv3 temporal vector" set to "CVSS:3.0/E:U/RL:O/RC:C") Exploit attributes ("Exploitability ease" set to "No known exploits are available") Plugin metadata (Add IAVM Info) Plugin Feed: 202606261608
Version 1.1 Jun 25, 2026, 3:43 PM New Plugin Feed: 202606251543

* Changelogs are generally available for changes made after Nov 1, 2022