Tracking: CVE-2026-73222
Severity: High
Who is affected
The npm package claude-code-templates, with versions through 1.29.2 listed as affected in the GitHub advisory. The studio must be started with --studio; the published fix is 1.29.4.
How the attack works
The studio listens on all interfaces on port 3444, allows wildcard cross-origin requests, and does not authenticate the affected API calls. The report identifies /api/execute and /api/install-agent, with attacker-controlled values reaching shell-enabled process execution.
A network caller may reach the studio directly. A malicious website visited by the operator can also issue cross-origin requests where browser and network conditions permit. Commands run with the studio account's privileges.
What to do
- Upgrade to 1.29.4 or later and restart the studio.
- Restrict the listener to trusted access and inspect requests to the affected API routes. Review unexpected installed agents and child processes.
- If an exposed studio shows suspicious activity, assess readable project files and credentials before rotating affected secrets.
Scope and limits
The affected-version list and the fixed-release number leave a gap. Do not assume an unlisted intermediate release is safe.