CVE-2026-46406: Anthropic Claude Code Insecure Temporary File Handling in Copy Command

# CVE-2026-46406: Anthropic Claude Code Insecure Temporary File Handling in Copy Command

https://gcdradar.vercel.app/incidents/cve-2026-46406-anthropic-claude-code-insecure-temporary-file · AIR-2026-0790 · closed 2026-06-25

- Lane: Patch now
- Severity: 2 (Disclosed vulnerability)
- Fix status: Fix status unknown
- First reported: 2026-06-25
- AI role: Attack on AI
- Products: Claude Code
- CVE ids: CVE-2026-46406
- CVSS: 4.4

## Summary

The Claude Code copy command creates responses at a predictable path without proper protections, enabling local response disclosure. Attackers can also use symlink attacks to overwrite local files.

## What to do

No action recorded; read the sources below and the vendor's advisory.

## Latest updates

- 2026-06-29: CVE-2026-46406: Claude Code is an agentic coding tool. (https://nvd.nist.gov/vuln/detail/CVE-2026-46406)
- 2026-06-25: CVE-2026-46406: @anthropic-ai/claude-code has an Insecure Temporary File in /copy Command that Enables Response Disclosure and Symlink-Based File Write (https://github.com/advisories/GHSA-4vp2-6q8c-pvq2)

## Sources

- 2026-06-25 GitHub Advisory Database: CVE-2026-46406: @anthropic-ai/claude-code has an Insecure Temporary File in /copy Command that Enables Response Disclosure and Symlink-Based File Write https://github.com/advisories/GHSA-4vp2-6q8c-pvq2
- 2026-06-29 NVD: CVE-2026-46406: Claude Code is an agentic coding tool. https://nvd.nist.gov/vuln/detail/CVE-2026-46406

Verify against the vendor's advisory before changing production. Data CC BY-SA 4.0, https://gcdradar.vercel.app.