CVE-2026-47090
MediumCVSS 4.6Exploitation Probability (EPSS)
Low risk1th percentile - higher than 1% of all known CVEs
Summary
A vulnerability in Claude HUD up to version 0.0.12 (fixed in commit 234d9aa) allows injection of arbitrary ANSI codes into terminal sessions due to improper construction of OSC 8 hyperlink escape sequences. Attackers can embed ESC+backslash sequences in the current working directory or branch URL, leading to execution of malicious ANSI codes such as text color changes, forged prompts, OSC 52 clipboard writes, or outbound HTTP requests when hyperlinks are clicked.
Risk Assessment
The organization is at risk of terminal-based phishing attacks, clipboard data theft, and potential information leakage via outbound HTTP requests to attacker-controlled servers. This could lead to terminal session hijacking and privilege escalation.
Recommendation
Immediately update Claude HUD to a version containing commit 234d9aa or later. If an update is not possible, avoid using unverified directory paths and branch URLs in the terminal environment.
Other vulnerabilities in Claude HUD
See all- CVE-2026-47092High
Claude HUD through version 0.0.12, patched in commit 234d9aa, contains a command injection vulnerability that allows local attackers to execute arbitrary commands by manipulating the COMSPEC environment variable. Attackers can set COMSPEC to an arbitrary binary path before claude-hud performs its version check, causing execFile() to execute the attacker-supplied executable with cmd.exe arguments, resulting in arbitrary code execution on Windows systems.
- CVE-2026-47091Low
Claude HUD through version 0.0.12 contains a path traversal vulnerability that allows attackers to read arbitrary files by supplying an unvalidated transcript_path value via stdin JSON. File metadata is written to a persistent cache file with insufficient permissions, creating a forensic record of accessed paths that survives process exit.
Original NVD description (English source)
Claude HUD through 0.0.12, patched in commit 234d9aa, constructs OSC 8 terminal hyperlink escape sequences using raw cwd and branchUrl values without stripping control characters or encoding embedded values, allowing attackers to inject arbitrary ANSI codes into terminal sessions. Attackers can embed ESC+backslash sequences in the current working directory or branch URL to execute malicious ANSI codes including text color changes, forged prompts, and OSC 52 clipboard writes, or trigger outbound HTTP requests to attacker-controlled remotes when hyperlinks are clicked.