Homepage

Download of Code Without Integrity Check Affecting claude-cli package, versions <2.1.206-r0

Severity

 Recommended
low

Based on default assessment until relevant scores are available.

Threat Intelligence

EPSS
0.17% (7th percentile)

Do your applications use this vulnerable package?

In a few clicks we can analyze your entire application and see what components are vulnerable in your application, and suggest you quick fixes.

Test your applications
  • Snyk IDSNYK-MINIMOSLATEST-CLAUDECLI-21404949
  • published22 Oct 2026
  • disclosed13 Oct 2026
Report a new vulnerability Found a mistake?

Introduced: 13 Oct 2026

NewCVE-2026-86063  (opens in a new tab)
CWE-494  (opens in a new tab)
CWE-829  (opens in a new tab)

How to fix?

Upgrade Minimos:latest claude-cli to version 2.1.206-r0 or higher.

NVD Description

Note: Versions mentioned in the description apply only to the upstream claude-cli package and not the claude-cli package as distributed by Minimos. See How to fix? for Minimos:latest relevant fixed versions and status.

Claude Code is an agentic coding tool. Prior to 2.1.179, the Claude Code and Claude Desktop plugin installation flow runs git checkout for a marketplace-pinned commit without verifying that the resulting HEAD equals the pinned 40-character SHA. An attacker who controls a plugin repository on a Git host that permits SHA-shaped branch names can create a branch named after the reviewed commit, causing checkout to select the branch tip and install attacker-controlled plugin code. Exploitation requires a user to install the malicious plugin and pin it to the ostensibly safe hash. This issue is fixed in version 2.1.179.