CyberSecBulletin

Jarrodwatts vulnerabilities

We track 1 vulnerability in Jarrodwatts products. 1 is rated high or critical, and none are known to be exploited. The most recent was published on May 18, 2026.

1vulnerabilities
0critical
1high
0exploited
7.8average CVSS score

Latest Jarrodwatts vulnerabilities

  • 7.8 High severity

    claude-hud: Uncontrolled Search Path Element

    CVE-2026-47092Jarrodwatts

    Claude HUD through 0.0.12, patched in commit 234d9aa, contains a command injection vulnerability that allows local attackers to execute arbitrary commands by manipulating the COMSPEC environment variable. Attackers can set COMSPEC to an arbitrary binary path b