CVE-2026-47090 Details

A vulnerability in Claude HUD versions through 0.0.12 allows for OSC 8 terminal hyperlink injection. The issue arises because the application constructs OSC 8 hyperlinks using raw current working directory (cwd) and branch URL values without properly sanitizing control characters or encoding. This oversight enables attackers to inject arbitrary ANSI codes into terminal sessions. Exploitation can be achieved by embedding ESC+backslash sequences in the cwd or branch URL, which can execute malicious ANSI codes such as altering text colors, creating fake prompts, and writing to the clipboard via OSC 52. Additionally, clicking the injected hyperlinks can trigger outbound HTTP requests to attacker-controlled servers.

Users can update to Claude HUD version 0.0.12 or later, where this vulnerability has been patched.