CVE-2026-45136 claude-code-cache-fix: Local code execution via Python triple-quote injection in tools/quota-statusline.sh
Attackers can execute arbitrary Python code in the user's Claude Code process by injecting triple-quote sequences into hook payloads.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Local or same network only
- Victim action needed
- Not needed
- Fix
- Available
What is CVE-2026-45136?
CVE-2026-45136 is a high-severity code injection vulnerability in cnighswonger claude-code-cache-fix, published on 27 May 2026. It can only be exploited from the same machine or local network, with no action from the victim.
Official description
claude-code-cache-fix is a cache optimization proxy for Claude Code. From 3.5.0 to before 3.5.2, tools/quota-statusline.sh (introduced in v3.5.0) interpolates Claude Code's hook stdin payload directly into a Python triple-quoted string literal. A ''' byte sequence in any user-controlled field of the payload closes the literal early and lets following bytes execute as Python in the user's Claude Code process. This vulnerability is fixed in 3.5.2.
Which versions are affected by CVE-2026-45136?
2 open source packages ship an affected version, including claude-code-cache-fix. It affects 1 product.
| Package | Affected | Fixed in |
|---|---|---|
claude-code-cache-fix npm | From 3.5.0 | 3.5.2 |
claude-code-cache-fix npm | From 3.5.0 | 3.5.2 |
Products include Cnighswonger Claude-Code-Cache-Fix.
How do I fix CVE-2026-45136?
Upgrade claude-code-cache-fix to 3.5.2 or later.
Upgrade, and never evaluate templates, expressions or code built from user input. More about Code injection.
Is CVE-2026-45136 being exploited?
It is not confirmed as exploited in the wild, but public exploit code for CVE-2026-45136 exists.
Sources
Also known as GHSA-g3xq-3gmv-qq8g.