CVE-2026-47091

Claude HUD through 0.0.12, patched in commit 234d9aa, contains a path traversal vulnerability that allows attackers to read arbitrary files by supplying an unvalidated transcript_path value via stdin JSON. Attackers can access any file readable by the process and the file metadata is written to a persistent cache file with insufficient permissions, creating a forensic record of accessed paths that survives process exit.

CVSS v3 3.3 LOW

3.3^/10

CVSS v3 : LOW

Vector :

Exploitability : 1.8 / Impact : 1.4

Attack Vector LOCAL

Attack Complexity LOW

Privileges Required LOW

User Interaction NONE

Confidentiality Impact LOW

Integrity Impact NONE

Availability Impact NONE

Scope UNCHANGED

References

Link	Resource
https://github.com/jarrodwatts/claude-hud/commit/234d9aad919b51326a43bcf90b45ae35c23afc30	Patch
https://github.com/jarrodwatts/claude-hud/issues/485	Issue Tracking
https://github.com/jarrodwatts/claude-hud/pull/487	Issue Tracking Patch
https://www.vulncheck.com/advisories/claude-hud-path-traversal-via-transcript-path	Third Party Advisory

Configurations

Configuration 1 (hide)

cpe:2.3:a:jarrodwatts:claude_hud:*:*:*:*:*:claude_code:*:*

History

26 Oct 2026, 13:10

Type	Values Removed	Values Added
Summary		(es) Claude HUD hasta la versión 0.0.12, parcheado en el commit 234d9aa, contiene una vulnerabilidad de salto de ruta que permite a los atacantes leer archivos arbitrarios al proporcionar un valor ’transcript_path’ no validado a través de JSON de stdin. Los atacantes pueden acceder a cualquier archivo legible por el proceso y los metadatos del archivo se escriben en un archivo de caché persistente con permisos insuficientes, creando un registro forense de las rutas accedidas que sobrevive al cierre del proceso.

Information

Published : 2026-05-18 20:16

Updated : 2026-10-26 13:10

NVD link : CVE-2026-47091

Mitre link : CVE-2026-47091

CVE.ORG link : CVE-2026-47091

JSON object : View

Products Affected

jarrodwatts

claude_hud

CWE

CWE-22

Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')

{"id": "CVE-2026-47091", "cveTags": [], "metrics": {"ssvcV203": [{"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "ssvcData": {"id": "CVE-2026-47091", "role": "CISA Coordinator", "options": [{"exploitation": "none"}, {"automatable": "no"}, {"technicalImpact": "partial"}], "version": "2.0.3", "timestamp": "2026-05-19T12:54:44.015416Z"}}], "cvssMetricV31": [{"type": "Secondary", "source": "disclosure@vulncheck.com", "cvssData": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 3.3, "attackVector": "LOCAL", "baseSeverity": "LOW", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N", "integrityImpact": "NONE", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "NONE", "privilegesRequired": "LOW", "confidentialityImpact": "LOW"}, "impactScore": 1.4, "exploitabilityScore": 1.8}], "cvssMetricV40": [{"type": "Secondary", "source": "disclosure@vulncheck.com", "cvssData": {"Safety": "NOT_DEFINED", "version": "4.0", "Recovery": "NOT_DEFINED", "baseScore": 4.8, "Automatable": "NOT_DEFINED", "attackVector": "LOCAL", "baseSeverity": "MEDIUM", "valueDensity": "NOT_DEFINED", "vectorString": "CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X", "exploitMaturity": "NOT_DEFINED", "providerUrgency": "NOT_DEFINED", "userInteraction": "NONE", "attackComplexity": "LOW", "attackRequirements": "NONE", "privilegesRequired": "LOW", "subIntegrityImpact": "NONE", "vulnIntegrityImpact": "NONE", "integrityRequirement": "NOT_DEFINED", "modifiedAttackVector": "NOT_DEFINED", "subAvailabilityImpact": "NONE", "vulnAvailabilityImpact": "NONE", "availabilityRequirement": "NOT_DEFINED", "modifiedUserInteraction": "NOT_DEFINED", "modifiedAttackComplexity": "NOT_DEFINED", "subConfidentialityImpact": "NONE", "vulnConfidentialityImpact": "LOW", "confidentialityRequirement": "NOT_DEFINED", "modifiedAttackRequirements": "NOT_DEFINED", "modifiedPrivilegesRequired": "NOT_DEFINED", "modifiedSubIntegrityImpact": "NOT_DEFINED", "modifiedVulnIntegrityImpact": "NOT_DEFINED", "vulnerabilityResponseEffort": "NOT_DEFINED", "modifiedSubAvailabilityImpact": "NOT_DEFINED", "modifiedVulnAvailabilityImpact": "NOT_DEFINED", "modifiedSubConfidentialityImpact": "NOT_DEFINED", "modifiedVulnConfidentialityImpact": "NOT_DEFINED"}}]}, "affected": [{"source": "disclosure@vulncheck.com", "affectedData": [{"repo": "https://github.com/jarrodwatts/claude-hud", "vendor": "jarrodwatts", "product": "claude-hud", "versions": [{"status": "affected", "version": "0", "versionType": "semver", "lessThanOrEqual": "0.0.12"}, {"status": "unaffected", "version": "234d9aad919b51326a43bcf90b45ae35c23afc30", "versionType": "git"}], "packageURL": "pkg:github/jarrodwatts/claude-hud", "defaultStatus": "affected"}]}], "published": "2026-05-18T20:16:39.863", "references": [{"url": "https://github.com/jarrodwatts/claude-hud/commit/234d9aad919b51326a43bcf90b45ae35c23afc30", "tags": ["Patch"], "source": "disclosure@vulncheck.com"}, {"url": "https://github.com/jarrodwatts/claude-hud/issues/485", "tags": ["Issue Tracking"], "source": "disclosure@vulncheck.com"}, {"url": "https://github.com/jarrodwatts/claude-hud/pull/487", "tags": ["Issue Tracking", "Patch"], "source": "disclosure@vulncheck.com"}, {"url": "https://www.vulncheck.com/advisories/claude-hud-path-traversal-via-transcript-path", "tags": ["Third Party Advisory"], "source": "disclosure@vulncheck.com"}], "vulnStatus": "Analyzed", "weaknesses": [{"type": "Secondary", "source": "disclosure@vulncheck.com", "description": [{"lang": "en", "value": "CWE-22"}]}], "descriptions": [{"lang": "en", "value": "Claude HUD through 0.0.12, patched in commit 234d9aa, contains a path traversal vulnerability that allows attackers to read arbitrary files by supplying an unvalidated transcript_path value via stdin JSON. Attackers can access any file readable by the process and the file metadata is written to a persistent cache file with insufficient permissions, creating a forensic record of accessed paths that survives process exit."}, {"lang": "es", "value": "Claude HUD hasta la versi\u00f3n 0.0.12, parcheado en el commit 234d9aa, contiene una vulnerabilidad de salto de ruta que permite a los atacantes leer archivos arbitrarios al proporcionar un valor \u2019transcript_path\u2019 no validado a trav\u00e9s de JSON de stdin. Los atacantes pueden acceder a cualquier archivo legible por el proceso y los metadatos del archivo se escriben en un archivo de cach\u00e9 persistente con permisos insuficientes, creando un registro forense de las rutas accedidas que sobrevive al cierre del proceso."}], "lastModified": "2026-10-26T13:10:00.140", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:a:jarrodwatts:claude_hud:*:*:*:*:*:claude_code:*:*", "vulnerable": true, "matchCriteriaId": "926F7E0C-FF47-463B-88BF-B5227655DDD1", "versionEndIncluding": "0.0.12"}], "operator": "OR"}]}], "sourceIdentifier": "disclosure@vulncheck.com"}