AI developer toolsBriefConfirmed by two or more outlets
CVE-2026-35603: ProgramData configuration trust in Claude Code, Cursor, Codex CLI and Gemini CLI (Cymulate), 2026
A writable system-wide configuration folder on Windows gave hook/notify privilege escalation to every user.
- Disclosed
Live scores
Live scores
CVE-2026-35603- EPSS
- 0.001
low predicted chance of attack - VEDAS
- 0.054
little exploit evidence - On CISA KEV
- Not listed
- Detection rule
- Out of scope (local)
Sources
This is a brief: a short, sourced summary from our incident tracking. Full advisories add commands to check whether you are affected.