Critical RCE Vulnerability in Claude Code CLI Exposed via Malicious Deeplinks

A critical Remote Code Execution (RCE) vulnerability was discovered in Anthropic's Claude Code CLI, allowing attackers to execute arbitrary commands on a victim's machine through specially crafted deeplinks. Identified by security researcher Joernchen, the flaw stemmed from insecure CLI flag parsing, which was exploited by injecting command fragments into deeplink URLs. This vulnerability, now patched in version 2.1.118, highlights the risks associated with convenience features in developer tools when input validation is inadequate. The issue was documented in various reports, emphasizing the need for secure handling of deeplink inputs. Security teams are advised to update to the patched version and review their CLI security practices. The vulnerability underscores a recurring class of issues in AI development tools, where traditional software flaws can lead to severe security risks.

Key Points: • A critical RCE vulnerability in Claude Code CLI was disclosed, affecting user systems. • The flaw allowed execution of arbitrary commands via crafted deeplink URLs. • The issue has been patched in version 2.1.118; users are urged to update immediately.