Anthropic claude-code up to 1.0.120 Graphical Interface ~/.ssh/known_hosts certificate host validation

Summaryinfo

A vulnerability was found in Anthropic claude-code. It has been declared as problematic. This issue affects some unknown processing of the file ~/.ssh/known_hosts of the component Graphical Interface. The manipulation results in certificate host validation. This vulnerability is reported as CVE-2026-44467. The attack can be launched remotely. No exploit exists. It is recommended to upgrade the affected component.

Detailsinfo

A vulnerability was found in Anthropic claude-code. It has been classified as problematic. Affected is some unknown processing of the file ~/.ssh/known_hosts of the component Graphical Interface. The manipulation with an unknown input leads to a certificate host validation vulnerability. CWE is classifying the issue as CWE-297. The product communicates with a host that provides a certificate, but the product does not properly ensure that the certificate is actually associated with that host. This is going to have an impact on integrity. CVE summarizes:

The Claude Desktop app gives you Claude Code with a graphical interface built for running multiple sessions side by side. From 1.2581.0 to before 1.4304.0, Claude Desktop's SSH remote development feature verified only whether a hostname existed in ~/.ssh/known_hosts without comparing the server's presented host key against the stored key. This allowed a network-positioned attacker to present an arbitrary SSH host key and have the connection silently accepted, enabling a man-in-the-middle attack on remote development sessions. Successful exploitation required the attacker to be in a network position to intercept SSH traffic (e.g., via ARP spoofing, rogue Wi-Fi, or DNS poisoning) and the target hostname to already have an entry in the victim's known_hosts file. This vulnerability is fixed in 1.4304.0.

The advisory is available at github.com. This vulnerability is traded as CVE-2026-44467 since 05/06/2026. The exploitability is told to be difficult. It is possible to launch the attack remotely. The exploitation doesn't require any form of authentication. Technical details are known, but there is no available exploit. This vulnerability is assigned to T1587.003 by the MITRE ATT&CK project.

Upgrading to version 1.4304.0 eliminates this vulnerability.

If you want to get best quality of vulnerability data, you may have to visit VulDB.

Productinfo

Type

• Artificial Intelligence Software

Vendor

• Anthropic

Name

• claude-code

Version

• 0.2.111
• 1.0.4
• 1.0.20
• 1.0.24
• 1.0.39
• 1.0.93
• 1.0.105
• 1.0.111
• 1.0.120

CPE 2.3info

• 🔒
• 🔒
• 🔒

CPE 2.2info

• 🔒
• 🔒
• 🔒

CVSSv4info

CVSSv3info

CVSSv2info

Exploitinginfo

Threat Intelligenceinfo

Countermeasuresinfo

Timelineinfo

Sourcesinfo

Entryinfo

If you want to get best quality of vulnerability data, you may have to visit VulDB.

Discussion