CVE-2026-47091 Details

A path traversal vulnerability has been identified in Claude HUD versions through 0.0.12. This vulnerability allows attackers to read arbitrary files by providing an unvalidated 'transcript_path' value via stdin JSON. The issue arises because the 'transcript_path' is not properly validated before being accessed, enabling the reading of any file that the process has permission to access. Additionally, the metadata of the accessed files is recorded in a persistent cache file with inadequate permissions, creating a lasting record of the accessed paths even after the process has exited.

Users are advised to update to the patched version of Claude HUD, which is available in the GitHub repository. The latest version includes validation for the 'transcript_path' to ensure it does not traverse outside of the intended directory, as well as improvements to the caching mechanism to protect file metadata.