{"id":"EUVD-2026-100461","enisaUuid":"271dc448-500b-358e-89fe-70d07e179fee","description":"Claude Code is an agentic coding tool. Prior to 2.1.179, the Claude Code and Claude Desktop plugin installation flow runs git checkout for a marketplace-pinned commit without verifying that the resulting HEAD equals the pinned 40-character SHA. An attacker who controls a plugin repository on a Git host that permits SHA-shaped branch names can create a branch named after the reviewed commit, causing checkout to select the branch tip and install attacker-controlled plugin code. Exploitation requires a user to install the malicious plugin and pin it to the ostensibly safe hash. This issue is fixed in version 2.1.179.","datePublished":"Oct 13, 2026, 7:04:11 PM","dateUpdated":"Oct 13, 2026, 8:21:00 PM","baseScore":7.5,"baseScoreVersion":"4.0","baseScoreVector":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:A/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N","references":"https://github.com/anthropics/claude-code/security/advisories/GHSA-pq7j-f95f-qfcv\nhttps://github.com/anthropics/claude-code/releases/tag/v2.1.179\n","aliases":"CVE-2026-86063\nGHSA-pq7j-f95f-qfcv\n","assigner":"GitHub_M","epss":0.17,"enisaIdProduct":[{"id":"26bdb6ed-4018-372d-9c9a-3a56e83f8565","product":{"name":"claude-code","vendor":{"name":"anthropics"}},"product_version":"\u003c 2.1.179"}],"enisaIdVendor":[{"id":"2ba4dda0-f96a-3989-9914-3d3b0323a00c","vendor":{"name":"anthropics"}}],"enisaIdVulnerability":[{"id":"163e640a-d0fc-366a-8ace-e44df26cae22","vulnerability":{"id":"GHSA-pq7j-f95f-qfcv","description":"Claude Code: Plugin Hash Pin Bypass Allows Bypass of Hash Pinning","datePublished":"Oct 15, 2026, 8:22:07 PM","dateUpdated":"Oct 15, 2026, 8:22:07 PM","baseScore":0.0,"references":"https://github.com/anthropics/claude-code/security/advisories/GHSA-pq7j-f95f-qfcv\nhttps://nvd.nist.gov/vuln/detail/CVE-2026-86063\nhttps://github.com/anthropics/claude-code\nhttps://github.com/anthropics/claude-code/releases/tag/v2.1.179\n","enisa_id":"EUVD-2026-100461\n","aliases":"CVE-2026-86063\nGHSA-pq7j-f95f-qfcv\n","epss":0.0,"dataProcessed":"Oct 25, 2026, 2:03:05 AM","vulnerabilityProduct":[],"vulnerabilityVendor":[]}},{"id":"d867a1ea-a872-3d4d-a725-676419d6779d","vulnerability":{"id":"CVE-2026-86063","description":"Claude Code is an agentic coding tool. Prior to 2.1.179, the Claude Code and Claude Desktop plugin installation flow runs git checkout for a marketplace-pinned commit without verifying that the resulting HEAD equals the pinned 40-character SHA. An attacker who controls a plugin repository on a Git host that permits SHA-shaped branch names can create a branch named after the reviewed commit, causing checkout to select the branch tip and install attacker-controlled plugin code. Exploitation requires a user to install the malicious plugin and pin it to the ostensibly safe hash. This issue is fixed in version 2.1.179.","datePublished":"Oct 13, 2026, 7:04:11 PM","dateUpdated":"Oct 13, 2026, 8:21:00 PM","status":"PUBLISHED","baseScore":7.5,"baseScoreVersion":"4.0","baseScoreVector":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:A/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N","references":"https://github.com/anthropics/claude-code/security/advisories/GHSA-pq7j-f95f-qfcv\nhttps://github.com/anthropics/claude-code/releases/tag/v2.1.179\n","enisa_id":"EUVD-2026-100461\n","assigner":"GitHub_M","epss":0.17,"dataProcessed":"Oct 28, 2026, 7:13:23 AM","vulnerabilityProduct":[{"id":"326ae2bf-9149-3fd7-aba4-c7917af749fb","product":{"name":"claude-code","vendor":{"name":"anthropics"}},"product_version":"\u003c 2.1.179"}],"vulnerabilityVendor":[{"id":"c92b8c5b-3cf6-3557-a998-11a6c3bb3f23","vendor":{"name":"anthropics"}}]}}],"enisaIdAdvisory":[]}