CVE-2026-73222: Claude Code Templates Studio Server Unauthenticated Execution
Claude Code Templates
Claude Code Templates prior to version 1.29.4 exposes an unauthenticated Studio server binding to all interfaces. Attackers can execute local tasks and install agents through unsecured API endpoints.
disclosed CVENo confirmed exploitation, so this record is tracked as a disclosed vulnerability and not counted as an incident. It moves into the counts if CISA or the vendor confirms exploitation. Why
- CVSS
- 8.8
- EPSS
- <0.01 · top 75% · 2026-11-13
- fix status
- Fix status unknown
- first report
- 11 Aug 2026
- last update
- 11 Aug 2026
- CVE ids
Timeline · 1
Sources · 1
Advisories and databases
- 2026-08-11CVE-2026-73222: Claude Code Templates is a CLI tool for configuring and monitoring Claude Code.NVD · nvd.nist.gov/vuln/detail/CVE-2026-73222
Titles and links belong to their publishers. The summary above is written by gcdRadar in its own words; data is CC BY-SA 4.0.
Classification
- lane
- Patch now
- AI role
- Attack on AI
- categories
- Infrastructure vulnerability
- severity
- 2 · Disclosed vulnerability
- fix status
- Fix status unknown
- targets
- Framework / tooling
- owasp llm top 10
- LLM03:2025 Supply Chain
- mitre atlas
- no technique for these categories
- dates
- happened 11 Aug 2026 · first reported 11 Aug 2026
- origin
- NVDVulnerability record from NVD / the GitHub Advisory Database. This product uses the NVD API but is not endorsed or certified by the NVD.
- record
- confidence 0.95 · created 2026-10-18 10:04Z · updated 2026-10-18 10:04Z
Lane, AI role, categories and severity come from the classifier; the OWASP and ATLAS rows are derived from the categories. How these are assigned
Copy a brief
This record as a short Markdown brief, for a ticket, a chat or a coding agent.
the brief as text
# CVE-2026-73222: Claude Code Templates Studio Server Unauthenticated Execution https://gcdradar.vercel.app/incidents/cve-2026-73222-claude-code-templates-studio-server-unauthent · AIR-2026-1273 · closed 2026-08-11 - Lane: Patch now - Severity: 2 (Disclosed vulnerability) - Fix status: Fix status unknown - First reported: 2026-08-11 - AI role: Attack on AI - Products: Claude Code Templates - CVE ids: CVE-2026-73222 - CVSS: 8.8 ## Summary Claude Code Templates prior to version 1.29.4 exposes an unauthenticated Studio server binding to all interfaces. Attackers can execute local tasks and install agents through unsecured API endpoints. ## What to do No action recorded; read the sources below and the vendor's advisory. ## Latest updates - 2026-08-11: CVE-2026-73222: Claude Code Templates is a CLI tool for configuring and monitoring Claude Code. (https://nvd.nist.gov/vuln/detail/CVE-2026-73222) ## Sources - 2026-08-11 NVD: CVE-2026-73222: Claude Code Templates is a CLI tool for configuring and monitoring Claude Code. https://nvd.nist.gov/vuln/detail/CVE-2026-73222 Verify against the vendor's advisory before changing production. Data CC BY-SA 4.0, https://gcdradar.vercel.app.
Related
- closed7.5Langflow CVE-2026-81265: IBM Langflow OSS security vulnerability
Patch now · Disclosed · since 10 Sep 2026 · CVE-2026-81265
AI - closed9.8Flowise CVE-2026-52098: Flowise remote code execution vulnerability
Patch now · Disclosed · since 10 Sep 2026 · CVE-2026-52098
AI - closed6.5Langflow CVE-2026-79725: IBM Langflow OSS arbitrary file read vulnerability
Patch now · Disclosed · since 10 Sep 2026 · CVE-2026-79725
AI - closed9.8Langflow CVE-2026-81204: Critical code injection vulnerability in IBM Langflow OSS
Patch now · Disclosed · since 10 Sep 2026 · CVE-2026-81204
AI - closed8.8Langflow CVE-2026-78569: Code execution vulnerability in IBM Langflow OSS security scanner
Patch now · Disclosed · since 10 Sep 2026 · CVE-2026-78569
AI - closed8.8Langflow CVE-2026-79742: Arbitrary code execution in IBM Langflow OSS due to blocklist flaw
Patch now · Disclosed · since 10 Sep 2026 · CVE-2026-79742
AI