PT-2025-40458

CVE-2025-59536

Published

2025-10-03

Updated

2026-11-05

Description by

CVSS 3.1

8.8

High

MetricsAV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Claude Code versions prior to 1.0.111

Description Claude Code, an agentic coding tool, contains a flaw in the startup trust dialog implementation. This allows the tool to be tricked into executing code within a project before the user has accepted the trust dialog. Successful exploitation occurs when a user starts the application in an untrusted directory.

Recommendations Update to version 1.0.111 or later.

Exploitability

Exploit

Fix

Impacts

Researchers

Vendors

Affected products

Weakness enumeration

CWE-94: Improper Control of Generation of Code (\'Code Injection\')

Related identifiers

CVE-2025-59536