[ CVE-2026-86063 · Published 13 Oct 2026 ]
Claude Code: Plugin Hash Pin Bypass Allows Bypass of Hash Pinning
CVSS 7.5
EPSS <1%Fix available
[ Description ]Official description
Claude Code is an agentic coding tool. Prior to 2.1.179, the Claude Code and Claude Desktop plugin installation flow runs git checkout for a marketplace-pinned commit without verifying that the resulting HEAD equals the pinned 40-character SHA. An attacker who controls a plugin repository on a Git host that permits SHA-shaped branch names can create a branch named after the reviewed commit, causing checkout to select the branch tip and install attacker-controlled plugin code. Exploitation requires a user to install the malicious plugin and pin it to the ostensibly safe hash. This issue is fixed in version 2.1.179.
[ Fixes ]Fixes and patches
- @anthropic-ai/claude-code 2.1.179Fixed version · GitHub Advisories · npm package @anthropic-ai/claude-code: upgrade to 2.1.179 or later (affected < 2.1.179)
[ Packages ]Affected open-source packages
- @anthropic-ai/claude-code npmAffected < 2.1.179 · fixed in 2.1.179 · GHSA-pq7j-f95f-qfcv