{"id":"EUVD-2026-23520","enisaUuid":"e7265f70-a4ae-3dc4-bae5-93ebcde5c619","description":"Claude Code is an agentic coding tool. In versions prior to 2.1.75 on Windows, Claude Code loaded the system-wide default configuration from C:\\ProgramData\\ClaudeCode\\managed-settings.json without validating directory ownership or access permissions. Because the ProgramData directory is writable by non-administrative users by default and the ClaudeCode subdirectory was not pre-created or access-restricted, a low-privileged local user could create this directory and place a malicious configuration file that would be automatically loaded for any user launching Claude Code on the same machine. Exploiting this would have required a shared multi-user Windows system and a victim user to launch Claude Code after the malicious configuration was placed. This issue has been fixed on version 2.1.75.","datePublished":"Apr 17, 2026, 8:38:49 PM","dateUpdated":"Apr 20, 2026, 2:57:47 PM","baseScore":5.4,"baseScoreVersion":"4.0","baseScoreVector":"CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:P/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N","references":"https://github.com/anthropics/claude-code/security/advisories/GHSA-5cwg-9f6j-9jvx\n","aliases":"CVE-2026-35603\nGHSA-5cwg-9f6j-9jvx\n","assigner":"GitHub_M","epss":0.11,"enisaIdProduct":[{"id":"f7fafa0b-dc51-3454-99d9-b3247e64619e","product":{"name":"claude-code","vendor":{"name":"anthropics"}},"product_version":"\u003c 2.1.75"}],"enisaIdVendor":[{"id":"a0f89924-7c22-32d8-b2a7-d8af414e03c2","vendor":{"name":"anthropics"}}],"enisaIdVulnerability":[{"id":"706226eb-0d0d-3a9a-b13d-e2268bba0443","vulnerability":{"id":"GHSA-5cwg-9f6j-9jvx","description":"Claude Code: Insecure System-Wide Configuration Loading Enables Local Privilege Escalation on Windows","datePublished":"Apr 17, 2026, 10:19:38 PM","dateUpdated":"Apr 27, 2026, 4:21:55 PM","baseScore":0.0,"references":"https://github.com/anthropics/claude-code/security/advisories/GHSA-5cwg-9f6j-9jvx\nhttps://nvd.nist.gov/vuln/detail/CVE-2026-35603\nhttps://github.com/anthropics/claude-code\n","enisa_id":"EUVD-2026-23520\n","aliases":"GHSA-5cwg-9f6j-9jvx\nCVE-2026-35603\n","epss":0.0,"dataProcessed":"Oct 25, 2026, 1:55:10 AM","vulnerabilityProduct":[],"vulnerabilityVendor":[]}},{"id":"e9c86f5b-92e0-3128-a4b3-3c8b47271842","vulnerability":{"id":"CVE-2026-35603","description":"Claude Code is an agentic coding tool. In versions prior to 2.1.75 on Windows, Claude Code loaded the system-wide default configuration from C:\\ProgramData\\ClaudeCode\\managed-settings.json without validating directory ownership or access permissions. Because the ProgramData directory is writable by non-administrative users by default and the ClaudeCode subdirectory was not pre-created or access-restricted, a low-privileged local user could create this directory and place a malicious configuration file that would be automatically loaded for any user launching Claude Code on the same machine. Exploiting this would have required a shared multi-user Windows system and a victim user to launch Claude Code after the malicious configuration was placed. This issue has been fixed on version 2.1.75.","datePublished":"Apr 17, 2026, 8:38:49 PM","dateUpdated":"Apr 20, 2026, 2:57:47 PM","status":"PUBLISHED","baseScore":5.4,"baseScoreVersion":"4.0","baseScoreVector":"CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:P/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N","references":"https://github.com/anthropics/claude-code/security/advisories/GHSA-5cwg-9f6j-9jvx\n","enisa_id":"EUVD-2026-23520\n","assigner":"GitHub_M","epss":0.11,"dataProcessed":"Oct 27, 2026, 7:18:59 AM","vulnerabilityProduct":[{"id":"0a830621-c873-3293-9e17-9436ef199ba0","product":{"name":"claude-code","vendor":{"name":"anthropics"}},"product_version":"\u003c 2.1.75"}],"vulnerabilityVendor":[{"id":"ee7371fa-deaa-331c-ac21-8bce22678cd7","vendor":{"name":"anthropics"}}]}}],"enisaIdAdvisory":[]}