Evidence · DiggingBeagle record
Claude Desktop Windows Git executable search-path advisory
Vendor security advisory covering project-local git.exe search-path execution and fixed version 1.8089.0.
- Published
- Oct 13, 2026
- Source role
- primary disclosure
Evidence record
Vendor security advisory covering project-local git.exe search-path execution and fixed version 1.8089.0.
Claim-level citations (2)
- supportsClaude Desktop could execute a repository-provided git.exe when opening a Windows project: Anthropic reports an unqualified git.exe invocation in Claude Desktop on Windows which could execute a repository-provided binary when the project was opened.
Description; uncontrolled search path and project working directory
- supportsClaude Desktop could execute a repository-provided git.exe when opening a Windows project: The advisory identifies Windows Claude Desktop versions before 1.8089.0 as affected and 1.8089.0 as patched.
Affected versions; Patched versions