CVE-2025-58764: anthropic claude_code Code Injection

Vulnerability summary

CVE-2025-58764 is a critical (CVSS 9.8) Code Injection vulnerability in anthropic claude_code. EPSS estimates a 0.55% chance of exploitation in the next 30 days, higher than 45.1% of scored vulnerabilities.

Timeline

1. 10-09-2025
   PublishedVulnerability first disclosed.
2. 11-09-2025
   Last modifiedVulnerability information updated.

Description

Claude Code is an agentic coding tool. Due to an error in command parsing, versions prior to 1.0.105 were vulnerable to a bypass of the Claude Code confirmation prompt to trigger execution of an untrusted command. Reliably exploiting this requires the ability to add untrusted content into a Claude Code context window. Users on standard Claude Code auto-update will have received this fix automatically. Users performing manual updates are advised to update to version 1.0.105 or the latest version.

• CWE-94Improper Control of Generation of Code ('Code Injection')The product constructs all or part of a code segment using externally-influenced input from an upstream component, but it does not neutralize or incorrectly neutralizes special elements that could modify the syntax or behavior of the intended code segment.