Anthropic disclosed a zero‑click vulnerability in the Linux kernel that security researchers have rated 9.8 out of 10 on the Common Vulnerability Scoring System (CVSS), calling it the "worst bug in the history of the internet." The flaw, identified as CVE‑2026‑98432, enables an attacker to execute arbitrary code with root privileges on vulnerable Linux servers without any user interaction.

Technical details and impact

According to Anthropic, the exploit chains together a series of low‑level operations that upgrade a relatively obscure kernel error into a remote code execution (RCE) vector. The attack can be launched over the network, granting the attacker full control of the target machine within 53 minutes, as demonstrated by the AI company’s researchers. The vulnerability does not require a malicious payload to be clicked or executed by a user, making it a classic zero‑click exploit.

Response from the Linux ecosystem

Ubuntu’s security team confirmed a delay in releasing patches, prompting concerns among its user base. Red Hat reiterated the critical nature of the bug and urged customers to apply updates as soon as they become available. Major cloud providers, including Amazon Web Services, have begun upgrading their infrastructure to mitigate the risk, while Anthropic is assisting partners in deploying temporary mitigations.

Industry reaction

The severity of CVE‑2026‑98432 has drawn commentary beyond the security community. Kyle Samani, a well‑known crypto influencer, described the flaw as "the worst bug in the history of the internet," while former Coinbase engineer Mert Mumtaz echoed the sentiment, calling it "even worse than that." Shopify’s CEO highlighted the issue in a widely viewed video, underscoring the broader business impact of the vulnerability.

What to watch next

Analysts will monitor the rollout of patches across major Linux distributions and cloud platforms over the coming days. Further disclosures from Anthropic about additional mitigation steps, as well as any potential exploitation in the wild, will shape the urgency of remediation efforts.