Claude Code Flaws Allow Remote Code Execution and API Key Exfiltration

Cybersecurity researchers have identified critical vulnerabilities in Anthropic's Claude Code, an AI-driven coding assistant, that could enable remote code execution and unauthorized access to API credentials. These security flaws stem from misconfigurations in mechanisms such as Hooks, Model Context Protocol (MCP) servers, and environment variables, highlighting significant risks in the platform's deployment.