Claude Desktop (Windows) fixes git.exe path hijacking vulnerability; versions before 1.8089.0 can execute arbitrary code when opening a malicious project

Anthropic released security advisory GHSA-4p2j-qj3c-6x84 (CVE-2026-88066), fixing a remote code execution vulnerability in Claude Desktop for Windows. The version calls git.exe via uv_spawn without specifying an absolute path, so the process searches the current working directory before system directories; an attacker only needs to place a malicious git.exe in the project directory, and when a user opens that directory with Claude Desktop, it executes automatically, requiring no interaction beyond opening the project. The advisory states the vulnerability can be exploited through supply-chain routes such as cloned repositories. Versions before 1.8089.0 are affected, and the fixed version is 1.8089.0; users on standard auto-update have received the fix, and manual updaters are advised to upgrade to the latest version. The vulnerability was reported by Junhyuk Im, Jeongmin Choi, and Seungyun Lee of S2W.