{"id":"EUVD-2026-23520","revision":"552a04b425b34ecf858d4b3e877edb4d","records":[{"revision":"552a04b425b34ecf858d4b3e877edb4d","observedAt":"2026-11-01T06:11:11.208+00:00","statement":{"source":"euvd","id":"EUVD-2026-23520","aliases":["CVE-2026-35603","GHSA-5cwg-9f6j-9jvx"],"title":"Claude Code is an agentic coding tool. In versions prior to 2.1.75 on Windows, Claude Code loaded the system-wide default configuration from C:\\ProgramData\\ClaudeCode\\managed-settings.json without validating directory ownership or access pe…","description":"Claude Code is an agentic coding tool. In versions prior to 2.1.75 on Windows, Claude Code loaded the system-wide default configuration from C:\\ProgramData\\ClaudeCode\\managed-settings.json without validating directory ownership or access permissions. Because the ProgramData directory is writable by non-administrative users by default and the ClaudeCode subdirectory was not pre-created or access-restricted, a low-privileged local user could create this directory and place a malicious configuration file that would be automatically loaded for any user launching Claude Code on the same machine. Exploiting this would have required a shared multi-user Windows system and a victim user to launch Claude Code after the malicious configuration was placed. This issue has been fixed on version 2.1.75.","state":0,"publishedAt":null,"modifiedAt":null,"affected":[],"metrics":[{"system":"EUVD CVSS 4.0","vector":"CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:P/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N","score":5.4,"severity":null}],"references":["https://github.com/anthropics/claude-code/security/advisories/GHSA-5cwg-9f6j-9jvx"],"sourceUrl":"https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-23520","license":"ENISA EUVD · source terms and attribution apply","enrichment":{"sourceStatus":null,"weaknesses":[],"productCriteria":[],"sourceDates":{"datePublished":"Apr 17, 2026, 8:38:49 PM","dateUpdated":"Apr 20, 2026, 2:57:47 PM"},"relatedAdvisories":[],"note":"EUVD source date text has no stated timezone and is retained without inventing a UTC instant. Related bulletin membership is not an alias, common cause or applicability claim. A missing vector with a zero score is treated as unrated. Complete vendor/product and underlying source evidence remains in the original JSON."},"key":"euvd:EUVD-2026-23520","identifiers":["EUVD-2026-23520","CVE-2026-35603","GHSA-5cwg-9f6j-9jvx"]},"retained":false,"historicalAffected":[]}],"coverage":[]}