CVE-2026-47091
LowCVSS 3.3Exploitation Probability (EPSS)
Low risk3th percentile - higher than 3% of all known CVEs
Summary
Claude HUD through version 0.0.12 contains a path traversal vulnerability that allows attackers to read arbitrary files by supplying an unvalidated transcript_path value via stdin JSON. File metadata is written to a persistent cache file with insufficient permissions, creating a forensic record of accessed paths that survives process exit.
Risk Assessment
An attacker can read any file readable by the process, including configurations, keys, or credentials, and the persistent cache may expose a history of accessed sensitive paths.
Recommendation
Immediately update Claude HUD to a version containing commit 234d9aa or later, and review cache file permissions; delete the cache if it contains sensitive paths.
Other vulnerabilities in Claude HUD
See all- CVE-2026-47092High
Claude HUD through version 0.0.12, patched in commit 234d9aa, contains a command injection vulnerability that allows local attackers to execute arbitrary commands by manipulating the COMSPEC environment variable. Attackers can set COMSPEC to an arbitrary binary path before claude-hud performs its version check, causing execFile() to execute the attacker-supplied executable with cmd.exe arguments, resulting in arbitrary code execution on Windows systems.
- CVE-2026-47090Medium
A vulnerability in Claude HUD up to version 0.0.12 (fixed in commit 234d9aa) allows injection of arbitrary ANSI codes into terminal sessions due to improper construction of OSC 8 hyperlink escape sequences. Attackers can embed ESC+backslash sequences in the current working directory or branch URL, leading to execution of malicious ANSI codes such as text color changes, forged prompts, OSC 52 clipboard writes, or outbound HTTP requests when hyperlinks are clicked.
Original NVD description (English source)
Claude HUD through 0.0.12, patched in commit 234d9aa, contains a path traversal vulnerability that allows attackers to read arbitrary files by supplying an unvalidated transcript_path value via stdin JSON. Attackers can access any file readable by the process and the file metadata is written to a persistent cache file with insufficient permissions, creating a forensic record of accessed paths that survives process exit.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS