Claude Code RCE Flaw Lets Attackers Execute Commands via Malicious Deeplinks

Cybersecuritynews •Guru Baran • May 18, 2026

A critical remote code execution (RCE) vulnerability has been discovered in Anthropic’s Claude Code CLI tool, allowing attackers to execute arbitrary commands on a victim’s machine by tricking them into clicking a specially crafted deeplink. The flaw, now patched in Claude Code version 2.1.118, was rooted in a naive command-line argument parser that could be […]

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

Critical RCE Vulnerability in Claude Code CLI Exposed via Malicious Deeplinks A critical Remote Code Execution (RCE) vulnerability was discovered in Anthropic's Claude Code CLI, allowing attackers to execute arbitrary commands on a victim's machine through specially crafted deeplinks. Identified by security researcher Joernchen, the flaw stemmed from insecure CLI flag parsing, which was exploited by injecting command fragments into deeplink URLs. This vulnerability, now patched in version 2.1.118, highlights the risks associated with convenience features in developer tools when input validation is inadequate. The issue was documented in various reports, emphasizing the need for secure handling of deeplink inputs. Security teams are advised to update to the patched version and review their CLI security practices. The vulnerability underscores a recurring class of issues in AI development tools, where traditional software flaws can lead to severe security risks. 4 sources 71

Extracted Entities

Claude Code RCE Flaw Lets Attackers Execute Commands via Malicious Deeplinks

The full story

Extracted Entities

Attack Types (1)

Companies (1)

MITRE ATT&CK (2)

Platforms (1)