RCE Vulnerability in Claude Code Exposes Developer Systems to Malicious PRs

• •A remote code execution flaw in Claude Code allows malicious pull requests to execute code.
• •The vulnerability exploits a trust boundary, potentially exposing developer secrets.
• •No specific CVEs or patches have been disclosed as of now.

A remote code execution (RCE) vulnerability has been identified in Claude Code's Model Context Protocol (MCP) configuration, allowing malicious pull requests (PRs) to execute code on developer systems. This flaw can expose sensitive developer secrets before code reviews are conducted. The issue arises from a trust boundary that remains intact, enabling attackers to trigger payloads simply by opening a PR. Anthropic, the company behind Claude Code, has acknowledged this behavior as part of its workspace trust model. The vulnerability poses a significant risk to developers using the platform, as it could lead to unauthorized access to sensitive information. Currently, there are no specific CVEs or patches disclosed for this vulnerability. Security professionals are advised to be vigilant when reviewing pull requests in Claude Code environments.