Claude Code GitHub Actions Flaw Exposes Repositories to Full Compromise

Gbhackers •Divya • June 2, 2026

A critical supply chain vulnerability in Anthropic’s Claude Code GitHub Actions workflow has been disclosed, exposing thousands of repositories to potential full compromise through a single malicious GitHub issue. Security researcher Ryota K from GMO Flat Security identified multiple flaws in the Claude Code integration that allowed attackers to bypass permission controls and inject untrusted […]

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

Critical Vulnerability in Claude Code GitHub Actions Exposes Repositories to Attacks A critical supply chain vulnerability in Claude Code’s GitHub Actions, identified by security researcher Ryota K from GMO Flat Security, allows attackers to compromise any repository using Anthropic’s CI/CD workflow. The flaw is due to a flawed permission model that enables bypassing of permission controls, exposing thousands of repositories to full compromise through a single malicious GitHub issue. The vulnerability has been patched in version 1.0.94 of Claude Code GitHub Actions. The impact is significant, potentially affecting Anthropic’s own infrastructure. Users are urged to update their systems to mitigate this risk. The vulnerability highlights serious concerns regarding supply chain security in CI/CD environments. 16 sources 73

Extracted Entities

Claude Code GitHub Actions Flaw Exposes Repositories to Full Compromise

The full story

Extracted Entities

Attack Types (1)

Companies (2)

Platforms (1)