CyberSecurityBoardThreat Intel · CVEs · Products
Critical CVEs

CVE-2026-35603: Anthropic Claude Code Windows Folder Trust Vulnerability

August 27, 2026

A vulnerability in Anthropic Claude Code (and other AI tools) allows a low-privileged attacker to drop configuration files in a trusted Windows folder (C:ProgramData) to execute commands in any user's session without prompts or elevated access.