{"vulnerability": "CVE-2026-54316", "sightings": [{"uuid": "60c76eaf-d2ad-47cd-9234-8b3349ed7a44", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54316", "type": "seen", "source": "https://bsky.app/profile/startuphub.bsky.social/post/3muatr2ibc423", "content": "8/11 executed them with higher privilege \u2192 CVE-2026-12537 and CVE-2026-54316. Palo Alto filed 26 reports on command injection (7 CVEs), 43 on file system (9 CVEs), and 13 on sandbox escapes \u2014 ~81 reports, ~18 CVEs total", "creation_timestamp": "2026-08-29T21:41:21.864694Z"}, {"uuid": "bd3b1cce-12e3-4005-aef1-117f4b0c8ad2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54316", "type": "seen", "source": "https://bsky.app/profile/securityrss.bsky.social/post/3msj4bxfzpp23", "content": "A public GitHub issue could have compromised AI coding tools from Anthropic, Google, and OpenAI, as revealed by Novee Security at Black Hat USA 2026. Vulnerabilities include CVE-2026-54316 in Claude Code, allowing remote code execution and credential theft.", "creation_timestamp": "2026-08-07T17:53:37.931039Z"}, {"uuid": "5a19da26-38e5-4de7-8dcb-77795e710e49", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54316", "type": "seen", "source": "https://gist.github.com/dev-krish-xyz/7604ca4e2ca8081e4e1481b4aa8e3585", "content": "\n| Product | Identifier | What Disagreed | Fixed In |\n|---|---|---|---|\n| claude-code-action | *None located* | Validator stripped single-quoted spans;git read them as a program path | Explicit git-push allowlist;most Bash tools removed |\n| claude-code | *None located* | Literal `/proc/self/environ` guardvs. the shell's quote removal | Step Summary output sanitized |\n| claude-code | CVE-2026-54316 | `huggingface.co` approved as a barehostname vs. every path under it | 2.1.163 |\n| Gemini CLI | CVE-2026-12537GHSA-wpqr-6v78-jr5g | `startsWith(\"run_shell_command(\")` vs. restriction inside parens;sanitized child env vs. shared PID namespace | 0.39.1run-gemini-cli 0.1.22 |\n| codex-action | None assigned | The prompt as the instruction channelvs. a writable `AGENTS.md` | Separate jobs, independent checkouts;`AGENTS.md` read-only |\n| claude-code-action | \u2014 | `endsWith(\"[bot]\")` vs. an actualpermission check | v1.0.94 |\n", "creation_timestamp": "2026-08-08T12:00:31.324584Z"}]}