CVE-2025-59041: anthropic claude_code Code Injection

Vulnerability summary

CVE-2025-59041 is a critical (CVSS 9.8) Code Injection vulnerability in anthropic claude_code. EPSS estimates a 0.55% chance of exploitation in the next 30 days, higher than 44.8% of scored vulnerabilities.

Timeline

1. 10-09-2025
   PublishedVulnerability first disclosed.
2. 15-10-2025
   Last modifiedVulnerability information updated.

Description

Claude Code is an agentic coding tool. At startup, Claude Code executed a command templated in with `git config user.email`. Prior to version 1.0.105, a maliciously configured user email in git could be used to trigger arbitrary code execution before a user accepted the workspace trust dialog. Users on standard Claude Code auto-update will have received this fix automatically. Users performing manual updates are advised to update to version 1.0.105 or the latest version.

• CWE-94Improper Control of Generation of Code ('Code Injection')The product constructs all or part of a code segment using externally-influenced input from an upstream component, but it does not neutralize or incorrectly neutralizes special elements that could modify the syntax or behavior of the intended code segment.