CVE-2025-59536: anthropic claude_code Code Injection

Vulnerability summary

CVE-2025-59536 is a high (CVSS 8.8) Code Injection vulnerability in anthropic claude_code. EPSS estimates a 27.21% chance of exploitation in the next 30 days, higher than 98% of scored vulnerabilities.

Timeline

1. 03-10-2025
   PublishedVulnerability first disclosed.
2. 03-10-2025
   Last modifiedVulnerability information updated.

Description

Claude Code is an agentic coding tool. Versions before 1.0.111 were vulnerable to Code Injection due to a bug in the startup trust dialog implementation. Claude Code could be tricked to execute code contained in a project before the user accepted the startup trust dialog. Exploiting this requires a user to start Claude Code in an untrusted directory. Users on standard Claude Code auto-update will have received this fix automatically. Users performing manual updates are advised to update to the latest version. This issue is fixed in version 1.0.111.

• CWE-94Improper Control of Generation of Code ('Code Injection')The product constructs all or part of a code segment using externally-influenced input from an upstream component, but it does not neutralize or incorrectly neutralizes special elements that could modify the syntax or behavior of the intended code segment.