r/cybersecurity•6 mo. agozack-ethClaude Code audit: Confirmed RCE via environment variable injectionNew Vulnerability Disclosureaudited.xyz/blog/claude-codeaudited.xyzPosted Apr 8, 2026, 1:10 PM UTC10ShareSave