{"dataType":"CVE_RECORD","dataVersion":"5.2","cveMetadata":{"cveId":"CVE-2026-88066","assignerOrgId":"a0819718-46f1-4df5-94e2-005712e83aaa","state":"PUBLISHED","assignerShortName":"GitHub_M","dateReserved":"2026-09-09T21:22:45.435Z","datePublished":"2026-11-03T20:07:52.495Z","dateUpdated":"2026-11-03T20:07:52.495Z"},"containers":{"cna":{"title":"Claude Desktop: Uncontrolled Search Path Enables Arbitrary Code Execution via Malicious Git Executable","problemTypes":[{"descriptions":[{"cweId":"CWE-427","lang":"en","description":"CWE-427: Uncontrolled Search Path Element","type":"CWE"}]}],"metrics":[{"cvssV4_0":{"attackVector":"NETWORK","attackComplexity":"LOW","attackRequirements":"PRESENT","privilegesRequired":"NONE","userInteraction":"ACTIVE","vulnConfidentialityImpact":"HIGH","vulnIntegrityImpact":"HIGH","vulnAvailabilityImpact":"HIGH","subConfidentialityImpact":"NONE","subIntegrityImpact":"NONE","subAvailabilityImpact":"NONE","baseScore":7.5,"baseSeverity":"HIGH","vectorString":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:A/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N","version":"4.0"}}],"references":[{"name":"https://github.com/anthropics/claude-code/security/advisories/GHSA-4p2j-qj3c-6x84","tags":["x_refsource_CONFIRM"],"url":"https://github.com/anthropics/claude-code/security/advisories/GHSA-4p2j-qj3c-6x84"}],"affected":[{"vendor":"anthropics","product":"claude-code","versions":[{"version":"< 1.8089.0","status":"affected"}]}],"providerMetadata":{"orgId":"a0819718-46f1-4df5-94e2-005712e83aaa","shortName":"GitHub_M","dateUpdated":"2026-11-03T20:07:52.495Z"},"descriptions":[{"lang":"en","value":"Claude Desktop is Anthropic's desktop application for interacting with Claude. Prior to 1.8089.0, Claude Desktop on Windows invokes git.exe through uv_spawn without an absolute path, allowing Windows search-path resolution to select a malicious git.exe placed in the opened project's current working directory before the intended system executable. Opening an attacker-controlled or shared repository can therefore execute the substituted program with the user's privileges. This issue is fixed in version 1.8089.0."}],"source":{"advisory":"GHSA-4p2j-qj3c-6x84","discovery":"UNKNOWN"}}}}