{"uuid": "3e0ca562-407b-4859-a4ee-4f30ace90049", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-21852", "type": "seen", "source": "https://bsky.app/profile/stupidllm.bsky.social/post/3mtlupmcfqr2a", "content": "CVE-2026-21852: Claude Code processed a repo's ANTHROPIC_BASE_URL override \u2014 and sent live API requests, key included, to that endpoint \u2014 before the workspace trust prompt ever appeared. Just opening a malicious repo was enough. Fixed in 2.0.65. https://www.stupidllm.com/incident/STUPID-2026-0083/", "creation_timestamp": "2026-08-21T13:32:32.513564Z"}