CVE-2026-33068: anthropic claude_code

Vulnerability summary

CVE-2026-33068 is a high (CVSS 8.8) vulnerability in anthropic claude_code. EPSS estimates a 0.59% chance of exploitation in the next 30 days, higher than 47.7% of scored vulnerabilities.

Timeline

1. 20-03-2026
   PublishedVulnerability first disclosed.
2. 20-03-2026
   Last modifiedVulnerability information updated.

Description

Claude Code is an agentic coding tool. Versions prior to 2.1.53 resolved the permission mode from settings files, including the repo-controlled .claude/settings.json, before determining whether to display the workspace trust confirmation dialog. A malicious repository could set permissions.defaultMode to bypassPermissions in its committed .claude/settings.json, causing the trust dialog to be silently skipped on first open. This allowed a user to be placed into a permissive mode without seeing the trust confirmation prompt, making it easier for an attacker-controlled repository to gain tool execution without explicit user consent. This issue has been patched in version 2.1.53.

• CWE-807Reliance on Untrusted Inputs in a Security DecisionThe product uses a protection mechanism that relies on the existence or values of an input, but the input can be modified by an untrusted actor in a way that bypasses the protection mechanism.