PT-2025-39338 · Npm+1 · Yarn+1

Published 2025-09-24 · Updated 2025-09-28 · CVE-2025-59828

Positive Technologies (AI Summary)

CVSS v3.1

9.8

Critical

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Claude Code versions prior to 1.0.39

Description Claude Code is an agentic coding tool. When used with Yarn versions 2.0 and higher, Yarn plugins are automatically executed when running yarn --version in versions prior to 1.0.39. This could bypass the directory trust dialog within Claude Code, as plugins execute before the user acknowledges the risks associated with working in an untrusted directory. Users utilizing Yarn Classic were not impacted by this issue. The auto-execution of Yarn plugins occurs via the yarn --version command.

Recommendations Update to Claude Code version 1.0.39 or later.

Exploit

Fix

Missing Authorization

Weakness Enumeration

CWE-829

CWE-862

Related Identifiers

CVE-2025-59828

GHSA-2JJV-QF24-VFM4

Affected Products

Claude-Code

Yarn

References · 12

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2025/59xxx/CVE-2025-59828.json · Exploit
• https://osv.dev/vulnerability/CVE-2025-59828 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2025-59828 · Security Note
• https://cve.org/CVERecord?id=CVE-2025-59828 · Security Note
• https://osv.dev/vulnerability/GHSA-2jjv-qf24-vfm4 · Vendor Advisory
• https://github.com/anthropics/claude-code · Note
• https://github.com/anthropics/claude-code/security/advisories/GHSA-2jjv-qf24-vfm4 · Note
• https://twitter.com/CVEnew/status/1970996072211476591 · Twitter Post
• https://twitter.com/VulmonFeeds/status/1971028300895060221 · Twitter Post
• https://t.me/CVEtracker/33298 · Telegram Post
• https://yarnpkg.com/advanced/plugin-tutorial · Note
• https://twitter.com/gothburz/status/1972089684366184820 · Twitter Post