Claude Code is an AI helper that works with code. It can add plugins. A plugin author could trick it into installing different code than the safe, locked version you chose. This only works if you install a bad plugin. Anthropic fixed it in version 2.1.179. The normal automatic update has already given the fix to most people.
- Status
- Patched: update now
- Being attacked?
- Not known[1]
- Severity
- High
- Updated
No report that anyone has used this bug. Severity: GitHub advisory rating: high (NVD score 7.5). First reported .
Am I affected?
You are at risk if you use Claude Code older than 2.1.179 and install plugins from other people. Run the command below to see your version.
| App | Device | Affected | Fixed in |
|---|---|---|---|
| Claude Code | Windows | Claude Code older than 2.1.179 | 2.1.179[1][2] |
| Claude Code | Mac | Claude Code older than 2.1.179 | 2.1.179[1][2] |
| Claude Code | Linux | Claude Code older than 2.1.179 | 2.1.179[1][2] |
How to check your version
These checks only look. They do not change anything on your computer.
Claude Code on Windows
Easy way: Open a terminal window and type the command below.
Or type this in PowerShellRead-only. It only reads the version and changes nothing.
claude --version
Claude Code on Mac
Easy way: Open Terminal and type the command below.
Or type this in TerminalRead-only. It only reads the version and changes nothing.
claude --version
Claude Code on Linux
Easy way: Open Terminal and type the command below.
Or type this in TerminalRead-only. It only reads the version and changes nothing.
claude --version
How to fix it
- Let Claude Code update itself, or run its own update command.
- Check that claude --version shows 2.1.179 or newer.
- Only install plugins from people you trust.
More on each app: Is my Claude Code up to date?
Official links
Check before installing, and only use these official links or the app's own update button.
For AI agents
This page as data: /incidents/claude-code-plugin-hash-pin-bypass.json. All problems: /feed.json. Use read-only checks only, and ask before installing anything.
Tracking numbers (CVE): CVE-2026-86063
Sources
- GitHub advisoryGitHub advisory GHSA-pq7j-f95f-qfcv: Claude Code plugin hash pin bypass (Oct 15, 2026)
- NVDNVD: CVE-2026-86063 (Oct 13, 2026)
"Maker", "CISA", "NVD", "GitHub advisory" and "Official notice" are official sources. "Researcher" and "News" are extra context.