CVE-2026-24052
Description
Claude Code is an agentic coding tool. Prior to version 1.0.111, Claude Code contained insufficient URL validation in its trusted domain verification mechanism for WebFetch requests. The application used a startsWith() function to validate trusted domains (e.g., docs.python.org, modelcontextprotocol.io), this could have enabled attackers to register domains like modelcontextprotocol.io.example.com that would pass validation. This could enable automatic requests to attacker-controlled domains without user consent, potentially leading to data exfiltration. This issue has been patched in version 1.0.111.
How to fix
- anthropic claude_code1.0.111 or later
- @anthropic-ai/claude-code1.0.111 or later
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| anthropic claude_code | v < 1.0.111 | 1.0.111 |
| @anthropic-ai/claude-codenpm | v < 1.0.111 | 1.0.111 |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.