CVE-2026-47751 | anthropics claude-code-action up to 1.0.73 MCP Server .mcp.json default behavioral workflow

July 16, 2026 Yanac

A vulnerability was found in anthropics claude-code-action up to 1.0.73. It has been rated as critical. The affected element is an unknown function of the file .mcp.json of the component MCP Server. This manipulation of the argument default causes enforcement of behavioral workflow.

This vulnerability is handled as CVE-2026-47751. The attack can be initiated remotely. There is not any exploit available.VulDB Recent EntriesRead More