Executive Summary

This vulnerability exists in Claude HUD versions up to 0.0.12 and is fixed in a later commit. It is a path traversal vulnerability that allows attackers to read arbitrary files on the system by providing an unvalidated transcript_path value through stdin JSON input.

Because the transcript_path is not properly validated, attackers can specify paths to files that the process has permission to read, thereby accessing sensitive information.

Additionally, the metadata of accessed files is written to a persistent cache file with insufficient permissions, which creates a forensic record of accessed paths that remains even after the process exits.

Useful 0 Not Useful 0

Impact Analysis

This vulnerability can impact you by allowing an attacker with limited privileges to read arbitrary files that the application process can access.

This could lead to unauthorized disclosure of sensitive information stored in those files.

Furthermore, the creation of a persistent cache file containing metadata of accessed files with insufficient permissions could expose a forensic record of file access, potentially leaking information about what files were accessed.

Useful 0 Not Useful 0