Claude Code

7 Yes2 Partial1 No0 Unknown

Feature	Status	Notes	Source	Checked
Tool-call approval prompts	Yes	Read-only by default; asks before Bash, file edits and MCP tools	Source	2026-11-04
Per-tool allow / deny	Yes	allow / ask / deny rules, incl. mcp__server__tool patterns	Source	2026-11-04
Sandboxing	Yes	OS-level sandbox for Bash: Seatbelt on macOS, bubblewrap on Linux/WSL2	Source	2026-11-04
OAuth for remote MCP	Yes	OAuth 2.0 for remote HTTP servers; project .mcp.json servers need approval	Source	2026-11-04
Verified marketplace listings	No	Anthropic says it cannot verify what third-party plugins contain or that they won't change	Source	2026-11-04
Auto-install / auto-update control	Partial	Plugins update in the background when a marketplace has auto-update on; toggle per marketplace	Source	2026-11-04
Admin allowlists	Yes	Managed settings: MCP allowlists and denylists	Source	2026-11-04
Audit logs	Partial	OpenTelemetry export of tool decisions and usage; no built-in audit log page	Source	2026-11-04
Data retention / training opt-out	Yes	Consumer training choice; commercial terms exclude training; ZDR for eligible orgs	Source	2026-11-04
Security disclosure page	Yes	HackerOne program; 36 GHSAs published on anthropics/claude-code	Source	2026-11-04

Advisories (39)

Oct 29, 2026Not Ratedresolved
Malicious 'Anthropic.claude-code' 2.1.312 / 2.1.313 in Cursor's extension marketplace
Cursor VS Code Extension Marketplace
Cursor Claude Code
Oct 26, 2026High 7.7patched
TOCTOU Race in Edit Tool Allows File Writes Outside the Workspace
Claude Code · CVE-2026-88968 · GHSA-5xjx-9qx6-jcrv
Claude Code
Oct 25, 2026Not Ratedopen
Postman Desktop auto-installs Codex / Claude Code plugins and pre-trusts its own startup hook
Postman Desktop 12.33.4–12.35.1
Codex Claude Code Cursor
Oct 13, 2026High 7.5patched
Uncontrolled Search Path Enables Arbitrary Code Execution via Malicious Git Executable
Claude Code · CVE-2026-88066 · GHSA-4p2j-qj3c-6x84
Claude Code
Oct 9, 2026High 7.7patched
Plugin Commit SHA Pin Bypass Allows Installation of Attacker-Controlled Code
Claude Code · CVE-2026-86063 · GHSA-pq7j-f95f-qfcv
Claude Code
Oct 5, 2026High 7.7patched
Arbitrary File Write via Write-Time Symlink Following (TOCTOU) in Claude Code
Claude Code · CVE-2026-103435 · GHSA-5j29-h97v-84ch
Claude Code
Sep 29, 2026Low 2.0patched
Managed Settings Not Applied When a Stored API Key Was Preferred Over Enterprise Sign-In
Claude Code · CVE-2026-103012 · GHSA-gfvf-j8jh-jxxw
Claude Code
Sep 25, 2026High 8.5patched
Claude Desktop (macOS): opening a malicious file from a Cowork folder could run commands on the host
Claude Code · GHSA-v234-4jrq-mgg6
Claude Code
Aug 9, 2026Not Ratedresearch
Shai-Hulud worm payload delivered through an official MCP Registry entry
MCP Registry (V.A.P.E entry)
MCP protocol, SDKs and registry GitHub Copilot Claude Code
Jun 25, 2026High 7.7patched
Sandbox Escape via Git Worktree Path Confusion Allows Unsandboxed Code Execution
Claude Code · CVE-2026-55607 · GHSA-7835-87q9-rgvv
Claude Code
Jun 25, 2026Medium 4.4patched
Insecure Temporary File in /copy Command Enables Response Disclosure and Symlink-Based File Write
Claude Code · CVE-2026-46406 · GHSA-4vp2-6q8c-pvq2
Claude Code
Jun 13, 2026Medium 6.0patched
Out-of-Band Data Exfiltration via Pre-Approved HuggingFace Domain in WebFetch
Claude Code · CVE-2026-54316 · GHSA-fg94-h982-f3mm
Claude Code

All 39 on the Claude Code profile →

Across the hub

Full Claude Code profile

Claude Code · MCP Clients Claude Code plugins · AI Plugins Claude Code · IDE Integrations 39 advisories

Weekly, free

What changed in AI integrations

One short email when MCP clients, plugin ecosystems, IDE integrations, AI plan prices or security advisories change. Every item is sourced.