Phoenix Security Kill Chain

Description

Single exploitation chain linking CVE-2026-35020 (TERMINAL env injection, zero user interaction) -> write crafted .claude/settings.json with apiKeyHelper -> CVE-2026-35022 (credential + MEMORY.md exfiltration over HTTP). Demonstrates that the three independently-reported vulnerabilities compose into a no-click compromise of Claude Code sessions on v2.1.91.

Key claims

Relations

Sources

src-20260409-f5e09e325670