{"id":"CVE-2026-86063","published":"2026-10-13T19:21:21.417","lastModified":"2026-10-13T21:19:36.730","description":"Claude Code is an agentic coding tool. Prior to 2.1.179, the Claude Code and Claude Desktop plugin installation flow runs git checkout for a marketplace-pinned commit without verifying that the resulting HEAD equals the pinned 40-character SHA. An attacker who controls a plugin repository on a Git host that permits SHA-shaped branch names can create a branch named after the reviewed commit, causing checkout to select the branch tip and install attacker-controlled plugin code. Exploitation requires a user to install the malicious plugin and pin it to the ostensibly safe hash. This issue is fixed in version 2.1.179.","cvssScore":null,"cvssSeverity":null,"cvssVector":null,"cwes":["CWE-494","CWE-829"],"vendors":[],"products":[],"references":[{"url":"https://github.com/anthropics/claude-code/releases/tag/v2.1.179","tags":[]},{"url":"https://github.com/anthropics/claude-code/security/advisories/GHSA-pq7j-f95f-qfcv","tags":[]}],"exploitRefs":[{"url":"https://github.com/anthropics/claude-code/releases/tag/v2.1.179","tags":[]},{"url":"https://github.com/anthropics/claude-code/security/advisories/GHSA-pq7j-f95f-qfcv","tags":[]}],"hasPoc":true,"ai":null}