// ClaudeHIGH
Anthropic disclosed two vulnerabilities in Claude Code: CVE-2026-103435, a symlink race condition allowing agent file writes to be redirected outside the project directory, and CVE-2026-103012, a policy enforcement bypass permitting sessions to start without the organization's managed policy controls. Both require immediate patching to prevent unauthorized file access and policy circumvention.
// Get alerts for Claude