PT-2026-37099 · Anthropic · Claude-Code

Masato_Anzaif · Published 2026-04-24 · Updated 2026-05-06 · CVE-2026-40068

Positive Technologies (AI Summary)

CVSS v3.1

8.8

High

Base vector

AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Claude Code versions 2.1.63 through 2.1.83

Description The folder trust determination logic fails to validate the contents of the git worktree commondir file. An attacker can craft a malicious repository with a commondir file pointing to a path previously trusted by the victim. This allows the attacker to bypass the trust confirmation dialog and execute hooks defined in .claude/settings.json. Successful exploitation requires the victim to clone the malicious repository, run Claude Code within it, and the attacker to know or guess a trusted path on the victim's system.

Recommendations Update to version 2.1.84.

Fix

Command Injection

RCE

Weakness Enumeration

CWE-77

CWE-20

Related Identifiers

CVE-2026-40068

GHSA-Q5HJ-MXQH-VV77

Affected Products

Claude-Code

References · 8

• https://github.com/anthropics/claude-code/security/advisories/GHSA-q5hj-mxqh-vv77 · Vendor Advisory
• https://osv.dev/vulnerability/GHSA-q5hj-mxqh-vv77 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2026-40068 · Security Note
• https://github.com/anthropics/claude-code · Note
• https://twitter.com/VulmonFeeds/status/2051902908149465165 · Twitter Post
• https://twitter.com/CVEnew/status/2051777782909194600 · Twitter Post
• https://twitter.com/infoflowcloud/status/2051779318204756279 · Twitter Post
• https://t.me/CVEtracker/52799 · Telegram Post