Live › vulnerability › CVE-2026-88066
Claude Desktop on Windows launches git.exe without an absolute path, so Windows can pick a malicious git.exe sitting in the opened project's folder. Opening an attacker-controlled or shared repository runs that program with the user's privileges.
Summary written from the sources below. Check the originals before acting.
First seen by InfraStack 2026-11-03 20:49 UTC. All times on this page are UTC.
Windows users of Claude Desktop prior to 1.8089.0 who open repositories from untrusted or shared sources. Exposure depends on a malicious git.exe being placed in the project's working directory. Users on macOS or Linux, or who only open their own trusted projects, are less exposed according to the description, which names only Windows.
No product ranges from the sources yet.
1.8089.0 or later.Each row is the first time that source carried this signal. The analyst’s rows are its own findings.
Claude Desktop is Anthropic's desktop application for interacting with Claude. Prior to 1.8089.0, Claude Desktop on Windows invokes git.exe through uv_spawn without an absolute path, allowing Windows search-path resolution to select a malicious git.exe placed in the opened project's current working directory before the intended system executable. Opening an attacker-controlled or shared repository can therefore execute the substituted program with the user's privileges. This issue is fixed in version 1.8089.0.
This page as .md · .json · in your agent: get_signal("CVE-2026-88066")
NVD data is provided by NIST and is public domain. Posts quoted belong to their authors.