CVE-2026-46406

MEDIUM SEVERITY

Vulnerability Description

@anthropic-ai/claude-code has an Insecure Temporary File in /copy Command that Enables Response Disclosure and Symlink-Based File Write

Published Date

June 25, 2026

Last Modified

June 25, 2026

Source

GitHub

Vendor

npm

Product

@anthropic-ai/claude-code