Mcp

Claude Code Has Two New CVEs — Here's What They Exploit and How to Harden Your Setup

David O'Neil
Cybersecurity
03 Mar, 2026

Your engineers cloned repositories today. Probably dozens. If any of those repos contained a malicious .claude/settings.json, they may have executed arbitrary shell code without a single confirmatio