Agentic-Ai โ€” PoC Archivehttps://poc.intelseclab.com/tags/agentic-ai/Latest proof-of-concept entries.Hugoen-usSun, 05 Jul 2026 00:00:00 +0000Claude Code WebFetch Hardcoded HuggingFace Bare-Hostname Allow-List Bypass โ€” CVE-2026-54316https://poc.intelseclab.com/pocs/misc/2026-07-05_cve-2026-54316-claude-code-webfetch-hf-exfil/Sun, 05 Jul 2026 00:00:00 +0000https://poc.intelseclab.com/pocs/misc/2026-07-05_cve-2026-54316-claude-code-webfetch-hf-exfil/Medium severity โ€” misc ยท CVE-2026-54316 (GHSA-fg94-h982-f3mm). Status: PoC. Affects: @anthropic-ai/claude-code (npm package, Claude Code CLI). Tags: claude-code, webfetch, prompt-injection, exfiltration, huggingface, allow-list-bypass, agentic-ai, docker-lab, cwe-183.miscMediumclaude-codewebfetchprompt-injectionexfiltrationhuggingfaceallow-list-bypassagentic-aidocker-labcwe-183