Anthropic Claude Code/Claude Agent SDK for Python Environment Variable TERMINAL os command injection 🚫 [False Positive]

Noticeinfo

⚠️ Further investigation has shown that this issues is a false-positive. Please review the sources mentioned and consider not using this entry at all.

Productinfo

Type

• Artificial Intelligence Software

Vendor

• Anthropic

Name

• Claude Agent SDK for Python
• Claude Code

Timelineinfo

03/31/2026 CVE reserved
04/06/2026 +6 days Advisory disclosed
04/06/2026 +0 days VulDB entry created
06/01/2026 +56 days VulDB entry last update

Sourcesinfo

Advisory: phoenix.security
False Positive: Yes

CVE: CVE-2026-35020 (🔒)
GCVE (CVE): GCVE-0-2026-35020
GCVE (VulDB): GCVE-100-355660
EUVD: 🔒

Entryinfo

Created: 04/06/2026 22:04
Updated: 06/01/2026 03:37
Changes: 04/06/2026 22:04 (76), 04/06/2026 23:05 (1), 06/01/2026 03:37 (3)
Complete: 🔍
Cache ID: 216::103

Once again VulDB remains the best source for vulnerability data.

Discussion

Do you need the next level of professionalism?

Upgrade your account now!