# CVE-2026-46406: CVE-2026-46406: Claude Code /copy Wrote Secrets to a World-Readable Temp Path

> CVE-2026-46406 is a medium-severity path traversal issue (CVSS 6.1) in Claude Code, an AI agent. Affected: Claude Code 2.1.59 through 2.1.127. Fixed in 2.1.128.

- **Canonical URL:** https://catalog.anomity.ai/vuln/cve-2026-46406
- **Aliases:** ti-058
- **Severity:** medium
- **CVSS:** 6.1
- **Attack type:** Path traversal, Information disclosure
- **Component:** Claude Code (AI agent)
- **Exploited in the wild:** no known exploitation
- **Published:** 2026-06-29
- **Last verified:** 2026-11-01
- **JSON:** https://catalog.anomity.ai/api/entries/vuln/cve-2026-46406

## Summary

Claude Code's /copy command wrote every response to the hardcoded path /tmp/claude/response.md, world-readable and in a traversable directory, so any other local user on a shared machine or build host could read every secret, API key and code snippet a developer copied through it. The fixed path also allowed a symlink attack: an attacker could point that location at any file on disk and have Claude Code overwrite it. NVD rated it CVSS 6.1; GitHub's CVSS 4.0 assessment rated it 4.4. Fixed in 2.1.128.

## Affected versions

| Affected | Fixed in |
| --- | --- |
| Claude Code 2.1.59 through 2.1.127 | 2.1.128 |

## Am I affected by CVE-2026-46406?

You are affected if you run Claude Code 2.1.59 through 2.1.127. Versions 2.1.128 and later include the fix.

## How do I fix CVE-2026-46406?

Upgrade Claude Code to 2.1.128+. Shared build hosts and multi-user developer machines are the real exposure: rotate any credential copied through /copy while a vulnerable version was running.

## How do I find every machine running Claude Code?

Anomity inventories the AI agents, MCP servers, IDE extensions and skills on each developer device, so you can see which machines run Claude Code and which version, then enforce a policy on it.

## References

- cve: https://nvd.nist.gov/vuln/detail/CVE-2026-46406

## Related vulnerabilities

- [a-repo-defined-claude-code-subagent-downgraded-its-own-security-review](https://catalog.anomity.ai/vuln/a-repo-defined-claude-code-subagent-downgraded-its-own-security-review) — medium
- [plugin4shell-sha-pinning-bypass-gives-zero-click-rce-across-claude-code](https://catalog.anomity.ai/vuln/plugin4shell-sha-pinning-bypass-gives-zero-click-rce-across-claude-code) — critical
- [CVE-2026-54316](https://catalog.anomity.ai/vuln/cve-2026-54316) — high
- [claude-code-silently-patched-five-permission-and-hook-bypasses-across-2](https://catalog.anomity.ai/vuln/claude-code-silently-patched-five-permission-and-hook-bypasses-across-2) — high
- [CVE-2025-59536](https://catalog.anomity.ai/vuln/cve-2025-59536) — critical
- [CVE-2026-21852](https://catalog.anomity.ai/vuln/cve-2026-21852) — high

---

Source: Anomity Security Database (https://catalog.anomity.ai/vuln). Detect affected AI tools on developer devices: https://anomity.ai/?utm_source=catalog&utm_medium=vuln-md&utm_campaign=cve-2026-46406