PT-2025-40458 · Anthropic · Claude-Code

Avivdon · Published 2025-10-03 · Updated 2026-05-28 · CVE-2025-59536

Positive Technologies (AI Summary)

CVSS v3.1

8.8

High

Base vector

AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Claude Code versions prior to 1.0.111

Description Claude Code is an agentic coding tool. A bug in the startup trust dialog implementation allows for code injection, where the tool could be tricked into executing code contained within a project before the user accepts the startup trust dialog. This requires the user to start the tool in an untrusted directory.

Recommendations Update to version 1.0.111 or later.

Exploit

Fix

RCE

Code Injection

Weakness Enumeration

CWE-94

Related Identifiers

CVE-2025-59536

GHSA-4FGQ-FPQ9-MR3G

Affected Products

Claude-Code

References · 76

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2025/59xxx/CVE-2025-59536.json · Exploit
• https://github.com/anthropics/claude-code/security/advisories/GHSA-4fgq-fpq9-mr3g · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2025-59536 · Security Note
• https://osv.dev/vulnerability/CVE-2025-59536 · Vendor Advisory
• https://osv.dev/vulnerability/GHSA-4fgq-fpq9-mr3g · Vendor Advisory
• https://github.com/anthropics/claude-code · Note
• https://reddit.com/r/TechNadu/comments/1rh7c6t/claude_code_vulnerabilities_allowed_rce_api_key · Reddit Post
• https://twitter.com/RealityPrimero/status/2027516547196195044 · Twitter Post
• https://reddit.com/r/CVEWatch/comments/1rhuktk/top_10_trending_cves_01032026 · Reddit Post
• https://twitter.com/CVEnew/status/1974010272059674764 · Twitter Post
• https://twitter.com/uwillc/status/2047635071964745918 · Twitter Post
• https://twitter.com/pubal/status/2028449573929107771 · Twitter Post
• https://twitter.com/DCWebGuy/status/2027028395138163009 · Twitter Post
• https://reddit.com/r/CVEWatch/comments/1tax0si/top_10_trending_cves_12052026 · Reddit Post
• https://twitter.com/gN3mes1s/status/1974375234078703687 · Twitter Post