CWE-515: Covert Storage Channel
Filter
A covert storage channel transfers information through the setting of bits by one program and the reading of those bits by another. What distinguishes this case from that of ordinary operation is that the bits are used to convey encoded information.
What the weakness is: CWE-515 at MITRE. All weaknesses
Ask an AI about CWE-515
Show the prompt
Explain CWE-515: Covert Storage Channel and how to prevent and detect it in code. Use https://cwe.mitre.org/data/definitions/515.html and https://cve.bz/cve/cwe/515?via=ask-ai-copy for recent CVEs with this weakness. Cite the sources.Opens a third-party assistant; its answer is its own, not cve.bz's. The prompt holds only this weakness's id and public links.
- 6.0CVE-2026-54316EPSS 0.5%
Claude Code is an agentic coding tool. From 0.2.54 until 2.1.163, because the hostname huggingface.co was pre-approved as a bare hostname for the WebFetch tool, any path on that domain—including attacker-controlled model repositories—was …