LoginAbusing the trust boundary in Claude Code for RCE. Trust is never broken and that opens up a few avenues for abuse. Simply opening claude code on a PR can be enough to silently trigger attacker payloads.
[link] [comments]
Normal view
-
/r/netsec - Information Security News & Discussion
- When terrible disclosure from the vendor results in zero days plus a fun dive in to bypassing full disk encryption
-
- Claude Code RCE: How a Malicious PR Triggers Code Execution
Claude Code RCE: How a Malicious PR Triggers Code Execution
6 August 2026 at 21:22
submitted by /u/kev-thehermit
[link] [comments]
MeshCentral: From XSS to RCE
13 June 2026 at 20:34
Using Claude Code to find and weaponise an XSS in MeshCentral using a rogue client, resulting in RCE.
[link] [comments]
