Skip to content
Patch Next
Sign inAdd to your agent

← Public intelligence

npm package

claude-code-templates

Open actionable advisories and recorded vendor fixes. This public package view has no inventory attached and cannot establish whether your deployment is affected. A vendor fix never resolves your finding; verify your installed version and the source guidance.

Open advisories

1 actionable advisory, newest first. Withdrawn advisories and news are excluded. Coverage is partial.

  1. High, CVSS 8.8npmPublished

    Claude Code Templates: Unauthenticated OS command injection (RCE) in Claude Code Studio server (--studio)

    CVE-2026-73222 · GHSA-79wm-x847-7cvg

    Affected
    • npm claude-code-templates <= 1.29.2
    Fixed in
    1.29.4· Vendor fix available
    Issue
    npx claude-code-templates --studio launches "Claude Code Studio", an Express HTTP server (cli-tool/src/sandbox-server.js, default port 3444) that binds to all interfaces (0.0.0.0), sets Access-Control-Allow-Origin: , and requires no authentication. Two POST endpoints pass attacker-controlled request-body fields into childprocess.spawn(..., { shell: true }). Because shell: true makes Node join the argv array into a single sh -c string, the fields are parsed by the shell and metacharacters execute. Any unauthenticated attacker who can reach the port — a malicious web page the developer visits, or anyone on the same LAN — can execute arbitrary OS commands on the developer's machine. Details In cli-tool/src/sandbox-server.js: - app.listen(PORT, ...) is called with no host argument, so the server listens on 0.0.0.0 / :: (reachable from the LAN, not just localhost). - The CORS middleware sends Access-Control-Allow-Origin: and answers the preflight OPTIONS for any origin, so a…

    Recommended action: Upgrade to 1.29.4 or later, then redeploy and verify.A vendor fix does not resolve your finding until you verify it in your own systems.

    Sources:github.comSource checked Evidence →