How severe is CVE-2026-44467?

CVE-2026-44467 has a CVSS 3.x base score of 6.8, rated medium severity. It is exploitable over an adjacent network with high attack complexity, requires no privileges and no user interaction. Impact on confidentiality is high, integrity high, and availability none.

Is CVE-2026-44467 being actively exploited?

It is not currently listed in CISA's KEV catalog. Its EPSS exploit-prediction score is 0% (3rd percentile), an estimate of the probability of exploitation in the next 30 days.

What products are affected by CVE-2026-44467?

CVE-2026-44467 affects Anthropic Claude Desktop. See the affected-products list for the exact vulnerable versions.

How do I fix CVE-2026-44467?

Review the linked vendor and NVD advisories for patched versions and mitigations, then upgrade or apply the recommended workaround.

Does CVE-2026-44467 have an EU (EUVD) identifier?

Yes. CVE-2026-44467 is tracked in the ENISA EU Vulnerability Database (EUVD) as EUVD-2026-30048.

When was CVE-2026-44467 published?

CVE-2026-44467 was published on 2026-05-13 and last updated on 2026-06-17.

CVE-2026-44467

CVE-2026-44467 is a medium-severity vulnerability in Anthropic Claude Desktop with a CVSS 3.x base score of 6.8. It is not currently listed as actively exploited by CISA, and its EPSS exploit-prediction score is low. The underlying weakness is classified as CWE-297.

Key facts

Severity: Medium (CVSS 3.x base score 6.8)
CVSS v4: 7.4
EPSS exploit prediction: 0% (3rd percentile)
Actively exploited: Not listed in CISA KEV
EU (EUVD) id: EUVD-2026-30048
Weakness: CWE-297
Affected product: Anthropic Claude Desktop
Published: 2026-05-13
Last modified: 2026-06-17

Description

The Claude Desktop app gives you Claude Code with a graphical interface built for running multiple sessions side by side. From 1.2581.0 to before 1.4304.0, Claude Desktop's SSH remote development feature verified only whether a hostname existed in ~/.ssh/known_hosts without comparing the server's presented host key against the stored key. This allowed a network-positioned attacker to present an arbitrary SSH host key and have the connection silently accepted, enabling a man-in-the-middle attack on remote development sessions. Successful exploitation required the attacker to be in a network position to intercept SSH traffic (e.g., via ARP spoofing, rogue Wi-Fi, or DNS poisoning) and the target hostname to already have an entry in the victim's known_hosts file. This vulnerability is fixed in 1.4304.0.

Frequently asked questions

What is CVE-2026-44467?: The Claude Desktop app gives you Claude Code with a graphical interface built for running multiple sessions side by side. From 1.2581.0 to before 1.4304.0, Claude Desktop's SSH remote development feature verified only whether a hostname existed in ~/.ssh/known_hosts without comparing the server's presented host key against the stored key. This allowed a network-positioned attacker to present an arbitrary SSH host key and have the connection silently accepted, enabling a man-in-the-middle attack on remote development sessions. Successful exploitation required the attacker to be in a network position to intercept SSH traffic (e.g., via ARP spoofing, rogue Wi-Fi, or DNS poisoning) and the target hostname to already have an entry in the victim's known_hosts file. This vulnerability is fixed in 1.4304.0.
How severe is CVE-2026-44467?: CVE-2026-44467 has a CVSS 3.x base score of 6.8, rated medium severity. It is exploitable over an adjacent network with high attack complexity, requires no privileges and no user interaction. Impact on confidentiality is high, integrity high, and availability none.
Is CVE-2026-44467 being actively exploited?: It is not currently listed in CISA's KEV catalog. Its EPSS exploit-prediction score is 0% (3rd percentile), an estimate of the probability of exploitation in the next 30 days.
What products are affected by CVE-2026-44467?: CVE-2026-44467 affects Anthropic Claude Desktop. See the affected-products list for the exact vulnerable versions.
How do I fix CVE-2026-44467?: Review the linked vendor and NVD advisories for patched versions and mitigations, then upgrade or apply the recommended workaround.
Does CVE-2026-44467 have an EU (EUVD) identifier?: Yes. CVE-2026-44467 is tracked in the ENISA EU Vulnerability Database (EUVD) as EUVD-2026-30048.
When was CVE-2026-44467 published?: CVE-2026-44467 was published on 2026-05-13 and last updated on 2026-06-17.

References

https://github.com/anthropics/claude-code/security/advisories/GHSA-3rwf-2g6p-c2f9

Affected products (1)

cpe:2.3:a:anthropic:claude_desktop:*:*:*:*:*:*:*:*

More vulnerabilities in Anthropic Claude Desktop

CVE-2026-44470 — High (CVSS 7.8): The Claude Desktop app gives you Claude Code with a graphical interface built for running multiple sessions side by…

All CVEs affecting Anthropic Claude Desktop →

Other CWE-297 vulnerabilities

CVE-2025-46408 — Critical (CVSS 9.8): An issue was discovered in the methods push.lite.avtech.com.AvtechLib.GetHttpsResponse and…
CVE-2025-68637 — Critical (CVSS 9.1): The Uniffle HTTP client is configured to trust all SSL certificates and disables hostname verification by default.…
CVE-2026-35563 — High (CVSS 8.5): It was identified that the LDAP client implementation in version 2.1.7 does not verify if the server certificate…
CVE-2025-3501 — High (CVSS 8.2): A flaw was found in Keycloak. By setting a verification policy to 'ALL', the trust store certificate verification is…
CVE-2025-2190 — High (CVSS 8.1): The mobile application (com.transsnet.store) has a man-in-the-middle attack vulnerability, which may lead to code…
CVE-2018-10936 — High (CVSS 8.1): A weakness was found in postgresql-jdbc before version 42.2.5. It was possible to provide an SSL Factory and not check…

Browse all CWE-297 vulnerabilities →