CVE-2026-46406
- Source
- https://cve.org/CVERecord?id=CVE-2026-46406
- Import Source
- https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-46406.json
- JSON Data
- https://api.osv.dev/v1/vulns/CVE-2026-46406
- Aliases
- Downstream
- Published
- 2026-06-29T14:03:14.683Z
- Modified
- 2026-07-15T01:49:08.399438002Z
- Severity
-
- 4.4 (Medium) CVSS_V4 - CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:A/VC:L/VI:L/VA:H/SC:N/SI:N/SA:N CVSS Calculator
- Summary
- Claude Code: Insecure Temporary File in /copy Command Enables Response Disclosure and Symlink-Based File Write
- Details
-
Claude Code is an agentic coding tool. From 2.1.59 until 2.1.128, the Claude Code /copy command wrote responses to a hardcoded, predictable path (/tmp/claude/response.md) without UID isolation, randomness, or symlink protection. The file was created world-readable (0644) in a world-traversable directory (0755), allowing any local user to read a privileged user's Claude response, which could contain secrets or credentials. Additionally, because the path was static and predictable, a local attacker could pre-create the directory and plant a symlink at the expected file path, causing the privileged process to follow the symlink and overwrite an attacker-chosen file with the response text. Exploiting this required a local unprivileged user on the same system and a privileged user to run the /copy command. This vulnerability is fixed in 2.1.128.
- Database specific
{ "cna_assigner": "GitHub_M", "cwe_ids": [ "CWE-200", "CWE-377", "CWE-59" ], "osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/46xxx/CVE-2026-46406.json" }- References