CVE-2025-64755

Anthropic's Claude Code has accumulated 28 CVEs in its first year, including two CVSS 10.0 critical sandbox escapes. CVE-2026-46406, the latest, let any local user read secrets from a predictable temp file path. When the security tool becomes the attack surface, every assumption changes.