CVE-2026-103012
- Source
- https://cve.org/CVERecord?id=CVE-2026-103012
- Import Source
- https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-103012.json
- JSON Data
- https://api.osv.dev/v1/vulns/CVE-2026-103012
- Aliases
-
- GHSA-gfvf-j8jh-jxxw
- Published
- 2026-09-30T11:30:38Z
- Modified
- 2026-10-02T03:31:05Z
- Severity
-
- 2.0 (Low) CVSS_V4 - CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N CVSS Calculator
- Summary
- [none]
- Details
-
Claude Code selected an API key stored by Claude Code, for example from an earlier
/loginor written directly to its configuration, ahead of the user's valid Claude Enterprise or Team sign-in when fetching the organization's server-managed settings, even though the session itself authenticated with the Enterprise or Team account. When the settings endpoint rejected that stored key, the session started without the organization's server-managed policy (such as permission deny rules, model restrictions and managed-only locks) or, if a previously cached copy existed on the machine, kept applying that stale copy without receiving later policy changes — while continuing to operate as the organization's account. Triggering this required local access to a device with such a stored API key; the no-policy case additionally required that no managed settings had previously been cached. Endpoint-managed (MDM or file-based) settings were not affected. Claude for Enterprise organizations were affected from version 2.0.68; Claude for Work (Team) organizations from version 2.1.38, when server-managed settings became available to them.Users on standard Claude Code auto-update have received this fix already. Users performing manual updates are advised to update to version 2.1.260 or later.
Thank you to Tamas Voros / NVIDIA AI Red Team for reporting this issue.
- Database specific
{ "cna_assigner": "Anthropic", "cwe_ids": [ "CWE-696" ], "osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/103xxx/CVE-2026-103012.json" }- References