---
id: CVE-2026-86063
title: Claude Code is an agentic coding tool
summary: >-
  Claude Code is an agentic coding tool. Prior to 2.1.179, the Claude Code and
  Claude Desktop plugin installation flow runs git checkout for a
  marketplace-pinned commit without verifying that the resulting HEAD equals the
  pinned 40-charact…
severity: none
cwe:
  - CWE-494
  - CWE-829
published: '2026-10-13'
updated: '2026-10-13'
sourceUpdated: '2026-10-13T21:19:36.730'
source: NVD
sourceUrl: 'https://nvd.nist.gov/vuln/detail/CVE-2026-86063'
references:
  - url: 'https://github.com/anthropics/claude-code/releases/tag/v2.1.179'
    label: security-advisories@github.com
  - url: >-
      https://github.com/anthropics/claude-code/security/advisories/GHSA-pq7j-f95f-qfcv
    label: security-advisories@github.com
tags:
  - nvd
ingestedAt: '2026-10-13T19:43:29.199Z'
---

## Overview

Claude Code is an agentic coding tool. Prior to 2.1.179, the Claude Code and Claude Desktop plugin installation flow runs git checkout for a marketplace-pinned commit without verifying that the resulting HEAD equals the pinned 40-character SHA. An attacker who controls a plugin repository on a Git host that permits SHA-shaped branch names can create a branch named after the reviewed commit, causing checkout to select the branch tip and install attacker-controlled plugin code. Exploitation requires a user to install the malicious plugin and pin it to the ostensibly safe hash. This issue is fixed in version 2.1.179.

## Remediation

Refer to the linked advisories for vendor-supplied fixes and affected version ranges.