Security Feed
See the latest insights and analysis from our MDR team.
RSS for SlackGHSA-7835-87q9-rgvv
By Ido Mizrahi |
25 June 2026
CVE-2026-55607 – Claude Code Git worktree path confusion enables sandbox escape and code execution
In @anthropic-ai/claude-code worktree handling, attackers can create worktrees named .git and navigate outside the sandbox, enabling Git directory confusion via symlinks and git fsmonitor execution during worktree ops. Affects `>=2.1.38,