{"id":"CVE-2026-73222","sourceIdentifier":"security-advisories@github.com","published":"2026-08-11T19:18:51.720","lastModified":"2026-10-24T15:10:00.190","vulnStatus":"Awaiting Analysis","cveTags":[],"descriptions":[{"lang":"en","value":"Claude Code Templates is a CLI tool for configuring and monitoring Claude Code. Prior to 1.29.4, the Claude Code Studio server launched by the --studio option in cli-tool/src/sandbox-server.js binds to all interfaces on port 3444, permits cross-origin requests, and requires no authentication. The POST /api/execute endpoint passes the prompt request-body field to executeLocalTask(), and POST /api/install-agent passes the agentName request-body field to a child process. The same unsafe agent field path is reachable from /api/execute through checkAndInstallAgent(). These attacker-controlled values reach child_process.spawn() with shell execution enabled, causing Node.js to construct a shell command in which metacharacters are interpreted. An attacker who can reach the port directly, or who convinces a developer running Studio to visit a malicious website, can execute arbitrary operating-system commands with the developer's privileges and compromise source code, credentials, and local data. This issue is fixed in version 1.29.4."},{"lang":"es","value":"Claude Code Templates es una herramienta de CLI para configurar y monitorear Claude Code. Antes de la versión 1.29.4, el servidor de Claude Code Studio lanzado por la opción --studio en cli-tool/src/sandbox-server.js se enlaza a todas las interfaces en el puerto 3444, permite solicitudes de origen cruzado y no requiere autenticación. El endpoint POST /api/execute pasa el campo prompt del cuerpo de la solicitud a executeLocalTask(), y POST /api/install-agent pasa el campo agentName del cuerpo de la solicitud a un proceso hijo. La misma ruta de campo de agente insegura es accesible desde /api/execute a través de checkAndInstallAgent(). Estos valores controlados por el atacante llegan a child_process.spawn() con la ejecución de shell habilitada, haciendo que Node.js construya un comando de shell en el que se interpretan los metacaracteres. Un atacante que puede alcanzar el puerto directamente, o que convence a un desarrollador que ejecuta Studio para visitar un sitio web malicioso, puede ejecutar comandos arbitrarios del sistema operativo con los privilegios del desarrollador y comprometer el código fuente, las credenciales y los datos locales. Este problema está solucionado en la versión 1.29.4."}],"affected":[{"source":"security-advisories@github.com","affectedData":[{"vendor":"davila7","product":"claude-code-templates","versions":[{"version":"< 1.29.4","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"security-advisories@github.com","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","baseScore":8.8,"baseSeverity":"HIGH","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"REQUIRED","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"exploitabilityScore":2.8,"impactScore":5.9}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2026-08-13T13:54:20.643368Z","id":"CVE-2026-73222","options":[{"exploitation":"poc"},{"automatable":"no"},{"technicalImpact":"total"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"security-advisories@github.com","type":"Secondary","description":[{"lang":"en","value":"CWE-78"},{"lang":"en","value":"CWE-306"},{"lang":"en","value":"CWE-352"}]}],"references":[{"url":"https://github.com/davila7/claude-code-templates/blob/main/CHANGELOG.md","source":"security-advisories@github.com"},{"url":"https://github.com/davila7/claude-code-templates/commit/bc4618b07232633c1c0aac12a43e436268d31783","source":"security-advisories@github.com"},{"url":"https://github.com/davila7/claude-code-templates/security/advisories/GHSA-79wm-x847-7cvg","source":"security-advisories@github.com"},{"url":"https://github.com/davila7/claude-code-templates/security/advisories/GHSA-79wm-x847-7cvg","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}]}