A newly discovered zero-click Linux vulnerability, identified as CVE-2026-98432, has been labeled one of the most severe security issues in recent memory after receiving a 9.8 out of 10 score on a common vulnerability scoring system. The issue caused concern among Ubuntu Linux users following a delay in code patches.
The vulnerability escalated after Claude linked a series of operations that transformed a niche error into an easily exploitable flaw. This allows hackers to remotely execute code on servers without requiring any user interaction or button clicks. An Anthropic staff member stated they could not think of a more severe bug, while a senior editor at ZDNet referred to it as a 'shoot me now' bug.
The issue gained significant attention over the weekend, garnering millions of views after being highlighted on social media by Shopify's CEO. A cybersecurity researcher described it as a working exploit that permits remote code execution as root without authentication.
Major technology entities responded to the threat. Amazon worked on upgrading its infrastructure, and Red Hat emphasized the critical nature of the bug. Anthropic reported that its researchers were able to take over certain Linux machines within 53 minutes late last week, while the company assisted organizations in applying patches and urged Linux ecosystem partners like Ubuntu to resolve the faulty code.
