Last seen October 3, 2026

Anthropic Remote Code Execution Vulnerability

Exploitation attempts came from China-hosted IP, VulnCheck researcher says

Technical Severity
Medium severity
Lifecycle Status

NEW

Sources

What Happened

Exploitation attempts came from China-hosted IP, VulnCheck researcher says

Why This Matters

The evidence matters to defenders using Anthropic because it could let an attacker run code in affected environments.

Recommended Action

Confirm whether and is present in your environment, compare your versions against the report, and apply available vendor patches or mitigations.

Exposure

My Interests Exposure

Exposure unknown

Recommended Response
Last Seen

Oct 03, 2026 20:57

Exposure reason: This incident does not currently match a technology in My Interests.

Exploitation status: CONFIRMED_IN_THE_WILD

Primary entities:

AnthropicMicrosoftOpenAIRemote Code Executionanthropics/anthropic-sdk-pythonopenai/openai-python

Authoritative Intelligence

CVE CVE-2026-61500 Incident identifier

EPSS is a vulnerability exploitation probability signal, not proof that your environment is exposed. CISA KEV means known exploitation of the vulnerability, not that your system was exploited.

Public GitHub References

Search GitHub for public repositories that mention this CVE. BugSkan only lists repository metadata as a defensive awareness signal — it does not fetch or display exploit code.

CVE-2026-61500 on GitHub

CVE-2026-61500: 1 public repository reference found.

aramosf/CVE-2026-61500

Possible public PoC reference

CVE-2026-61500 Rejetto HFS predictable PRNG session forgery to RCE PoC and Docker lab

0 stars · Python

Open repository

A public PoC or exploit-related repository means weaponization material may exist in the open. It does not prove your environment was targeted.

Timeline

  • Incident first seen
    Oct 03, 2026 20:57

    BugSkan first recorded this incident.

  • Anthropic's super bug-hunting model Mythos is hardcore good at math, as latest vuln under attack shows
    Oct 03, 2026 20:57

    theregister.com · Vulnerability

Sources

Anthropic's super bug-hunting model Mythos is hardcore good at math, as latest vuln under attack shows

theregister.com · Oct 03, 2026 20:57

Exploitation attempts came from China-hosted IP, VulnCheck researcher says

Open publisher source

Other BugSkan incidents that share identifiers, products, or vendors with this report.

My Interests Match

Want personalized relevance?

Create an account to see which incidents overlap with your interests.

← Back to incident intelligence