CVE-2026-35022

✕ Withdrawn — historical dataCRITICALNVD 9.8
9.8CVSS

Anthropic Claude Code CLI and Claude Agent SDK contain an OS command injection vulnerability in authentication helper execution where helper configuration values are executed using shell=true without input validation. Attackers who can influence authentication settings can inject shell metacharacters through parameters like apiKeyHelper, awsAuthRefresh, awsCredentialExport, and gcpAuthRefresh to execute arbitrary commands with the privileges of the user or automation environment, enabling credential theft and environment variable exfiltration.

CVSS v3
9.8
EchelonGraph score
Not yet assessedThis CVE record was withdrawn by its numbering authority, so there is no vulnerability to rate.
EPSS PROB
—
EPSS %ILE
—
KEV
—Not applicable: this CVE ID was withdrawn

Published

April 6, 2026

Last Modified

April 29, 2026

References (2)

Frequently asked(4)

What is CVE-2026-35022?
CVE-2026-35022 is a rejected CVE ID: its record was withdrawn on May 29, 2026 and no longer describes a vulnerability. Reason given: This CVE ID has been rejected by its CVE Numbering Authority (CNA). It was determined that the -p flag behavior is documented in Anthropic's claude -h output with an explicit warning that non-interactive mode should only be used in trusted directories, making this intended and described behavior rather than a vulnerability.
When was the CVE record for CVE-2026-35022 published?
The CVE record for CVE-2026-35022 was published on April 6, 2026. EchelonGraph's copy of the record carries a last-modified date of April 29, 2026; the record at its source may have been updated since.
What is the CVSS score of CVE-2026-35022?
CVE-2026-35022 has a CVSS v3 base score of 9.8 (NVD).
How do I remediate CVE-2026-35022?
There is nothing to remediate under CVE-2026-35022: it is a rejected (withdrawn) CVE ID and no longer describes a vulnerability.