CVE-2026-73222

Name of the Vulnerable Software and Affected Versions Claude Code Templates versions prior to 1.29.4

Description The Claude Code Studio server, launched via the --studio option, binds to all interfaces on port 3444, allows cross-origin requests, and lacks authentication. The POST /api/execute endpoint passes the prompt request-body field to the executeLocalTask() function, and the POST /api/install-agent endpoint passes the agentName request-body field to a child process. Additionally, the agentName path is accessible via /api/execute through the checkAndInstallAgent() function. These attacker-controlled values are passed to child process.spawn() with shell execution enabled, allowing the interpretation of metacharacters. This enables an attacker to execute arbitrary operating-system commands with the developer's privileges, potentially compromising source code, credentials, and local data.

Recommendations Update to version 1.29.4. As a temporary workaround, restrict access to the POST /api/execute and POST /api/install-agent endpoints or avoid using the --studio option until the update is applied.