CVE-2025-59536

nvd.nist.gov • April 30, 2026

Claude Code is an agentic coding tool. Versions before 1.0.111 were vulnerable to Code Injection due to a bug in the startup trust dialog implementation. Claude Code could be tricked to execute code contained in a project before the user accepted the startup trust dialog. Exploiting this requires a user to start Claude Code in an untrusted directory. Users on standard Claude Code auto-update will have received this fix automatically. Users performing manual updates are advised to update to the latest version. This issue is fixed in version 1.0.111.

Denotes Vulnerable Software Are we missing a CPE here? Please let us know .

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

Multiple Vulnerabilities in Claude Code Expose Users to Security Risks Claude Code, an agentic coding tool by Anthropic, has been found to have multiple vulnerabilities affecting various versions. CVE-2026-33068 allows attackers to bypass the trust dialog, enabling arbitrary tool execution without user consent. CVE-2026-25723 permits file write restrictions to be bypassed through improper command validation, potentially leading to system compromise. CVE-2026-21852 enables data exfiltration of sensitive API keys before user trust is confirmed. CVE-2025-59536 allows code execution prior to user acceptance of the startup trust dialog. Users are advised to update to the latest versions to mitigate these risks. The vulnerabilities primarily affect users of Claude Code versions prior to the specified patches. The attack vectors involve network access and user interaction, highlighting the need for vigilance in repository management and command execution. 71

Extracted Entities

CVE-2025-59536

The full story

Extracted Entities

Attack Types (1)

CVEs (1)

CWE Weaknesses (1)