Is CVE-2026-35020 in the CISA Known Exploited Vulnerabilities catalog?

CVE-2026-35020 is not currently listed in the CISA KEV catalog.

Vulnerability intelligence

CVE-2026-35020

TrustFall: one-click RCE. SymJack: symlink hijack installs attacker MCP servers. Clinejection: a GitHub issue title compromised 4,000 developers. Claude Code leaked its source — three CVEs fell out. The tools building the web are its newest attack surface.

2026

What WebPulse reported · 1 analysis

TrustFall, SymJack, Clinejection: Every AI Coding Agent Is Hackable

TrustFall: one-click RCE. SymJack: symlink hijack installs attacker MCP servers. Clinejection: a GitHub issue title compromised 4,000 developers. Claude Code le

June 9, 2026

View CVE-2026-35020 on the NIST National Vulnerability Database →

Related vulnerabilities

CVE-2026-9082 CVE-2026-8206 CVE-2026-48019 CVE-2026-35273 CVE-2026-11645 CVE-2026-8181 CVE-2026-47291 CVE-2026-45657