Open Redirect in Anthropic Claude Code
CVE-2026-24052
Claude Code is an agentic coding tool. Prior to version 1.0.111, Claude Code contained insufficient URL validation in its trusted domain verification mechanism for WebFetch requests. The application used a startsWith() function to validate trusted domains (e.g., docs.python.org, modelcontextprotocol.io), this could have enabled attackers to register domains like modelcontextprotocol.io.example.com that would pass validation. This could enable automatic requests to attacker-controlled domains without user consent, potentially leading to data exfiltration. This issue has been patched in version 1.0.111.
Vulnerability class: Open Redirect
EPSS: 0.003 (26.3th percentile) — read the EPSS interpretation.
CVSS v3 metric
CVSS v3 base score 7.4 (High). Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:N/A:N.
Affected products
- Anthropic Claude_code
- Anthropics Claude-code — versions < 1.0.111
Weakness classification (CWE)
References
- security-advisories@github.com (x_refsource_CONFIRM, Vendor Advisory)
Frequently asked questions
- What is CVE-2026-24052?
- CVE-2026-24052 is a high-severity vulnerability in Anthropic Claude Code, classified under URL Redirection to Untrusted Site (Open Redirect). CVSS score: 7.4/10. Published 2026-02-03.
- How severe is CVE-2026-24052?
- High severity. CVSS v3 base score is 7.4 out of 10.