AINewsnow

Claude Code's Git Worktree Handling Let a Malicious Repo Escape the Sandbox (CVE-2026-55607)

This story is from 2026-09-14. It is preserved in the archive; the latest stories are on the live feed.

Cloning a repository and running Claude Code against it was enough. No prompt approval, no explicit command — just opening the project. What the source says Anthropic's own GitHub Security Advisory ( GHSA-7835-87q9-rgvv , CVE-2026-55607) documents a sandbox-escape chain in Claude Code versions ≥2.1…

Read the full story at DEV Community — AI ↗

Timeline · 1 report

  1. 2026-09-14 09:53 · DEV Community — AI
    Claude Code's Git Worktree Handling Let a Malicious Repo Escape the Sandbox (CVE-2026-55607)

More stories

  1. AI's role in building AI surging? Anthropic says Claude now leads 26% of its R&D — Mint AI
  2. Hackers Used Anthropic’s Claude to Break Into OpenAI — Wall Street Journal Technology
  3. OpenAI discloses six new safety incidents — Axios AI+
  4. Anthropic adds support for the AGENTS.md instructions spec to Claude Code; OpenAI contributed AGENTS.md to the Agentic AI Foundation last year (Thomas Claburn/The Register) — Techmeme
  5. Claude, Anthropic’s AI model, is helping to develop the next version of itself — Fast Company AI
  6. Minimax H3 template Missing. — r/comfyui
  7. OpenAI ‘ethically hacked’ with help of Anthropic’s Claude chatbot — The Guardian AI
  8. Anthropic says its chatbot Claude is taking over the work of building its own successor — Washington Post AI

Get the daily brief of stories like this at 6:30 every morning →