CVE-2026-21852Vulnerability
Reported by 1 independent source · first reported by Zscaler ThreatLabz · last reported
Last reported 6 months ago
What the reports say
1 report, newest first · the exact sentence from each-
Anthropic Claude Code Leak“…mise.Amplified exploitation of known vulnerabilities and discovery of new vulnerabilities: Pre-existing flaws (e.g., CVE-2025-59536, CVE-2026-21852, RCE and API key exfiltration via malicious repo configs, hooks, MCP servers, and env vars) are now far easier to weaponize.”
Indicators reported together
named in the same reports- 147.45.197[.]92in 1 report
- 94.228.161[.]88in 1 report
- repositories[.]inin 1 report
- packages[.]watchin 1 report
- daemons[.]securityin 1 report
- prompts[.]buildin 1 report
- hxxps://telegram[.]me/g1n3sssVidarin 1 report
Copy these 7 indicators · defanged
Also named with it: CVE-2025-59536
Thanks — we review every report.