Medium6.8Red Hat Linux Updated

@anthropic-ai/claude-code: Claude Code: Information disclosure and file overwrite via insecure temporary file in /copy command

CVE-2026-46406 Published Jun 29, 2026Updated by vendor Jun 29, 2026

CVE-2026-46406

Affected products & platforms

Red Hat LinuxUnclassified

Summary

@anthropic-ai/claude-code: Claude Code: Information disclosure and file overwrite via insecure temporary file in /copy command. Red Hat rates this moderate (CVSS 6.8). Weakness: CWE-59.

Fixed versions

2.1.128

Official advisory · high-confidence parse· fetched 7 hours ago·verify at source

Mitigation checklist

Recommended fix / mitigation

Update Claude Code to version 2.1.128 or later, which uses randomized, UID-isolated temporary file paths with symlink protection. If updating is not immediately possible, avoid using the /copy command on multi-user systems where untrusted local users have access to /tmp.

Official advisory · high-confidence parse· fetched 7 hours ago·verify at source

Discussion(0)

No comments yet. Share field notes, upgrade gotchas, or questions — verify against the vendor advisory before acting on community advice.