CVE-2026-88066: Claude Desktop: Uncontrolled Search Path Enables Arbitrary Code Execution via Malicious Git Executable
Claude Desktop is Anthropic's desktop application for interacting with Claude. Prior to 1.8089.0, Claude Desktop on Windows invokes git.exe through uvspawn without an absolute path, allowing Windows search-path resolution to select a malicious git.exe placed in the opened project's current working directory before the intended system executable. Opening an attacker-controlled or shared repository can therefore execute the substituted program with the user's privileges. This issue is fixed in version 1.8089.0.
Event History
Frequently Asked Questions
Who is exposed to this issue?
Windows users of Claude Desktop versions earlier than 1.8089.0 are exposed when they open an attacker-controlled or shared repository. The substituted program runs with the privileges of the user running Claude Desktop.
What does an attacker need to exploit it?
An attacker needs to place a malicious git.exe in the current working directory of a repository that the user opens. Windows search-path resolution can select that file instead of the intended Git executable.
Are default installations affected?
The issue affects vulnerable Claude Desktop installations on Windows because git.exe is invoked without an absolute path. Exploitation still requires the user to open a repository containing the malicious executable.
What can be done before updating?
Avoid opening untrusted or shared repositories that may contain a git.exe in the project directory. Update Claude Desktop to version 1.8089.0, which fixes the issue.