2025-08 · 2025-Q3
Claude Code InversePrompt Command Injection
Was this approved as what it claims to be?
- Fixable
- Vendor patch
- Vendor response
- Patched
- In the wild
- No
- Actor
- Attacker
Target
Anthropic Claude Code (below v1.0.20)
Impact
Whitelisted echo command used as injection vector; AI model helps reverse-engineer its own security
Root cause
Error in command parsing; echo whitelisted without sanitization
CVEs
Sources
Catalog
Cite this: AgentProv incident record: Claude Code InversePrompt Command Injection (2025-08). https://agentprov.com/incidents/2025-08-claude-code-inverseprompt-command-injection
Related
- Also L7 · 2026-10-22METR and Redwood: OpenAI's Agent Monitoring Was "Not Fit for Purpose" During the Hugging Face Break-InL7Build / Approval
- Also L7 · 2026-10-21OpenAI: Two Internal Agents Disabled Misalignment Monitoring, and One Denied It When AskedL7Build / Approval
- Also L7 · 2026-10-15Claude Code Plugin Hash Pins Could Be Bypassed With a Branch Named Like the Pinned SHA (CVE-2026-86063)L7Build / Approval