CVE-2026-22561

{"dataType": "CVE_RECORD", "dataVersion": "5.2", "cveMetadata": {"cveId": "CVE-2026-22561", "assignerOrgId": "36234546-b8fa-4601-9d6f-f4e334aa8ea1", "state": "PUBLISHED", "assignerShortName": "hackerone", "dateReserved": "2026-01-07T15:39:03.440Z", "datePublished": "2026-03-31T15:30:38.876Z", "dateUpdated": "2026-05-10T13:58:31.956Z"}, "containers": {"cna": {"descriptions": [{"lang": "en", "value": "Uncontrolled search path elements in Anthropic Claude for Windows installer (Claude Setup.exe) versions prior to 1.1.3363 allow local privilege escalation via DLL search-order hijacking. The installer loads DLLs (e.g., profapi.dll) from its own directory after UAC elevation, enabling arbitrary code execution if a malicious DLL is planted alongside the installer."}], "affected": [{"defaultStatus": "unaffected", "vendor": "Anthropic", "product": "Claude Desktop - Windows", "versions": [{"version": "0", "status": "affected", "lessThan": "1.1.3363", "versionType": "semver"}]}], "references": [{"url": "https://trust.anthropic.com/resources?s=1cvig6ldp3zvuj1yffzr11&name=cve-2026-22561-dll-search-order-hijacking-in-claude-for-windows-installer"}], "metrics": [{"cvssV4_0": {"version": "4.0", "vectorString": "CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:P/VC:N/VI:N/VA:N/SC:H/SI:H/SA:H", "baseScore": 4.7, "baseSeverity": "MEDIUM"}}], "credits": [{"lang": "en", "value": "Kazuma Matsumoto, a security reseaercher at GMO Cybersecurity by IERAE, Inc", "type": "finder"}], "providerMetadata": {"orgId": "36234546-b8fa-4601-9d6f-f4e334aa8ea1", "shortName": "hackerone", "dateUpdated": "2026-03-31T18:13:52.328Z"}}, "adp": [{"problemTypes": [{"descriptions": [{"type": "CWE", "cweId": "CWE-427", "lang": "en", "description": "CWE-427 Uncontrolled Search Path Element"}]}], "metrics": [{"other": {"type": "ssvc", "content": {"timestamp": "2026-03-31T16:27:37.909291Z", "id": "CVE-2026-22561", "options": [{"Exploitation": "none"}, {"Automatable": "no"}, {"Technical Impact": "partial"}], "role": "CISA Coordinator", "version": "2.0.3"}}}], "title": "CISA ADP Vulnrichment", "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2026-05-10T13:58:31.956Z"}}]}}

{"dataType": "CVE_RECORD", "containers": {"adp": [{"title": "CISA ADP Vulnrichment", "metrics": [{"other": {"type": "ssvc", "content": {"id": "CVE-2026-22561", "role": "CISA Coordinator", "options": [{"Exploitation": "none"}, {"Automatable": "no"}, {"Technical Impact": "partial"}], "version": "2.0.3", "timestamp": "2026-03-31T16:27:37.909291Z"}}}], "problemTypes": [{"descriptions": [{"lang": "en", "type": "CWE", "cweId": "CWE-427", "description": "CWE-427 Uncontrolled Search Path Element"}]}], "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2026-03-31T16:31:29.129Z"}}], "cna": {"credits": [{"lang": "en", "type": "finder", "value": "Kazuma Matsumoto, a security reseaercher at GMO Cybersecurity by IERAE, Inc"}], "metrics": [{"cvssV4_0": {"version": "4.0", "baseScore": 4.7, "baseSeverity": "MEDIUM", "vectorString": "CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:P/VC:N/VI:N/VA:N/SC:H/SI:H/SA:H"}}], "affected": [{"vendor": "Anthropic", "product": "Claude Desktop - Windows", "versions": [{"status": "affected", "version": "0", "lessThan": "1.1.3363", "versionType": "semver"}], "defaultStatus": "unaffected"}], "references": [{"url": "https://trust.anthropic.com/resources?s=1cvig6ldp3zvuj1yffzr11&name=cve-2026-22561-dll-search-order-hijacking-in-claude-for-windows-installer"}], "descriptions": [{"lang": "en", "value": "Uncontrolled search path elements in Anthropic Claude for Windows installer (Claude Setup.exe) versions prior to 1.1.3363 allow local privilege escalation via DLL search-order hijacking. The installer loads DLLs (e.g., profapi.dll) from its own directory after UAC elevation, enabling arbitrary code execution if a malicious DLL is planted alongside the installer."}], "providerMetadata": {"orgId": "36234546-b8fa-4601-9d6f-f4e334aa8ea1", "shortName": "hackerone", "dateUpdated": "2026-03-31T18:13:52.328Z"}}}, "cveMetadata": {"cveId": "CVE-2026-22561", "state": "PUBLISHED", "dateUpdated": "2026-05-10T13:58:31.956Z", "dateReserved": "2026-01-07T15:39:03.440Z", "assignerOrgId": "36234546-b8fa-4601-9d6f-f4e334aa8ea1", "datePublished": "2026-03-31T15:30:38.876Z", "assignerShortName": "hackerone"}, "dataVersion": "5.2"}

{"affected": [{"affectedData": [{"defaultStatus": "unaffected", "product": "Claude Desktop - Windows", "vendor": "Anthropic", "versions": [{"lessThan": "1.1.3363", "status": "affected", "version": "0", "versionType": "semver"}]}], "source": "support@hackerone.com"}], "configurations": [{"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:a:anthropic:claude:*:*:*:*:*:*:*:*", "matchCriteriaId": "A807B059-FBC1-44F4-A6C4-86EA1A4136B5", "versionEndExcluding": "1.1.3363", "vulnerable": true}], "negate": false, "operator": "OR"}, {"cpeMatch": [{"criteria": "cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*", "matchCriteriaId": "A2572D17-1DE6-457B-99CC-64AFD54487EA", "vulnerable": false}], "negate": false, "operator": "OR"}], "operator": "AND"}], "cveTags": [], "descriptions": [{"lang": "en", "value": "Uncontrolled search path elements in Anthropic Claude for Windows installer (Claude Setup.exe) versions prior to 1.1.3363 allow local privilege escalation via DLL search-order hijacking. The installer loads DLLs (e.g., profapi.dll) from its own directory after UAC elevation, enabling arbitrary code execution if a malicious DLL is planted alongside the installer."}, {"lang": "es", "value": "Elementos de ruta de b\u00fasqueda no controlados en el instalador de Anthropic Claude para Windows (Claude Setup.exe) versiones anteriores a la 1.1.3363 permiten la escalada de privilegios local mediante el secuestro del orden de b\u00fasqueda de DLL. El instalador carga DLLs (p. ej., profapi.dll) desde su propio directorio despu\u00e9s de la elevaci\u00f3n de UAC, lo que permite la ejecuci\u00f3n de c\u00f3digo arbitrario si se planta una DLL maliciosa junto al instalador."}], "id": "CVE-2026-22561", "lastModified": "2026-07-24T20:10:00.147", "metrics": {"cvssMetricV31": [{"cvssData": {"attackComplexity": "LOW", "attackVector": "LOCAL", "availabilityImpact": "HIGH", "baseScore": 7.8, "baseSeverity": "HIGH", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "REQUIRED", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", "version": "3.1"}, "exploitabilityScore": 1.8, "impactScore": 5.9, "source": "nvd@nist.gov", "type": "Primary"}], "cvssMetricV40": [{"cvssData": {"Automatable": "NOT_DEFINED", "Recovery": "NOT_DEFINED", "Safety": "NOT_DEFINED", "attackComplexity": "LOW", "attackRequirements": "NONE", "attackVector": "LOCAL", "availabilityRequirement": "NOT_DEFINED", "baseScore": 4.7, "baseSeverity": "MEDIUM", "confidentialityRequirement": "NOT_DEFINED", "exploitMaturity": "NOT_DEFINED", "integrityRequirement": "NOT_DEFINED", "modifiedAttackComplexity": "NOT_DEFINED", "modifiedAttackRequirements": "NOT_DEFINED", "modifiedAttackVector": "NOT_DEFINED", "modifiedPrivilegesRequired": "NOT_DEFINED", "modifiedSubAvailabilityImpact": "NOT_DEFINED", "modifiedSubConfidentialityImpact": "NOT_DEFINED", "modifiedSubIntegrityImpact": "NOT_DEFINED", "modifiedUserInteraction": "NOT_DEFINED", "modifiedVulnAvailabilityImpact": "NOT_DEFINED", "modifiedVulnConfidentialityImpact": "NOT_DEFINED", "modifiedVulnIntegrityImpact": "NOT_DEFINED", "privilegesRequired": "LOW", "providerUrgency": "NOT_DEFINED", "subAvailabilityImpact": "HIGH", "subConfidentialityImpact": "HIGH", "subIntegrityImpact": "HIGH", "userInteraction": "PASSIVE", "valueDensity": "NOT_DEFINED", "vectorString": "CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:P/VC:N/VI:N/VA:N/SC:H/SI:H/SA:H/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X", "version": "4.0", "vulnAvailabilityImpact": "NONE", "vulnConfidentialityImpact": "NONE", "vulnIntegrityImpact": "NONE", "vulnerabilityResponseEffort": "NOT_DEFINED"}, "source": "support@hackerone.com", "type": "Secondary"}], "ssvcV203": [{"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "ssvcData": {"id": "CVE-2026-22561", "options": [{"exploitation": "none"}, {"automatable": "no"}, {"technicalImpact": "partial"}], "role": "CISA Coordinator", "timestamp": "2026-03-31T16:27:37.909291Z", "version": "2.0.3"}}]}, "published": "2026-03-31T16:16:28.850", "references": [{"source": "support@hackerone.com", "tags": ["Vendor Advisory"], "url": "https://trust.anthropic.com/resources?s=1cvig6ldp3zvuj1yffzr11&name=cve-2026-22561-dll-search-order-hijacking-in-claude-for-windows-installer"}], "sourceIdentifier": "support@hackerone.com", "vulnStatus": "Modified", "weaknesses": [{"description": [{"lang": "en", "value": "CWE-427"}], "source": "nvd@nist.gov", "type": "Primary"}, {"description": [{"lang": "en", "value": "CWE-427"}], "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "type": "Secondary"}]}

{}

{"affected": [{"configurations": [{"platform": ["windows"], "status": "affected", "versions": {"scheme": "semver", "value": "[1.1.3363,1.1.3363)"}}], "enrichment": {"confidence": 100.0, "confidence_source": "manual", "scores": [{"score": 100.0, "source": "manual"}]}, "original": {"product": "Claude Desktop - Windows", "source": "cna", "vendor": "Anthropic"}, "product": "claude_desktop", "vendor": "anthropic"}], "analysis": {"en": {"generated_at": "2026-04-07T09:56:43.489558+00:00", "value": {"mitigation_remediation": ["Update to Anthropic Claude Desktop version\u202f1.1.3363 or newer, which removes the DLL search\u2011order vulnerability. ", "Before updating, check the installer\u2019s directory for any unexpected or malicious DLLs and remove or rename them. ", "Limit write access to the directory containing the installer to prevent unauthorized DLL placement."], "summary": {"action": "Immediate Patch", "impact": "Local Privilege Escalation"}, "threat_synthesis": {"affected_systems": "Users who have installed Anthropic Claude Desktop for Windows with any installer version earlier than 1.1.3363 are affected. The vulnerability exploits the Windows DLL search\u2011order mechanism, so it applies to any Windows environment capable of running the installer and contains that directory structure.", "description_and_impact": "The installer for Anthropic Claude Desktop for Windows loads DLL files from its own directory after user\u2011account\u2011control elevation. Because the search path is not constrained, a malicious DLL with the same name as a legitimate file \u2013 for example profapi.dll \u2013 can be placed beside the installer and will be loaded during installation. This allows an attacker who can run the installer on the target machine to execute arbitrary code with elevated privileges.", "risk_and_exploitability": "The CVSS score of 4.7 indicates moderate severity. The EPSS score of less than 1\u202f% suggests that exploitation is not common in the wild, and the vulnerability is not listed in the CISA KEV catalog. An attacker must have local access, the ability to run the installer, and write permission to the installer\u2019s directory to place a rogue DLL. Given these prerequisites, the risk is moderate but manageable by applying the vendor\u2011recommended fix."}}}}, "created": "2026-03-31T19:54:08.874007+00:00", "title": "DLL Search\u2011Order Hijacking in Anthropic Claude for Windows Installer", "updated": "2026-04-08T20:00:18.396278+00:00", "vendors": ["anthropic", "anthropic$PRODUCT$claude_desktop"]}