🛡️ CVE-2025-59536

The items that name it 8

• Is Claude Code safe for the enterprise? What the official settings cover, and what they don't
  article2026-10-22It is written here as CVE-2025-59536: Claude Code read project-level configuration before the startup trust dialog resolved, so cloning and opening a repository could run shell commands. Fixed..
• Top 10 attacks on Claude Code and what each one actually broke
  writeup2026-09-23

  CVSS 8.7, CWE-94 (code injection); Claude Code read project-level .claude/settings.json before the startup trust dialog resolved, allowing arbitrary shell command execution from an untrusted cloned repo; found by Check Point Research; fixed in Claude Code 1.0.111; patched before publication.

• OWASP Agentic Skills Top 10 explained: the ten agent skill risks, and which to fix first
  article2026-08-25

  Claude Code vulnerability where repository configuration files could trigger code execution before any dialog appeared; patched

• Vulnerability Garden
  tool2026-05-13
• anmolksachan/AI-ML-Free-Resources-for-Security-and-Prompt-Injection
  repo2026-05-07

  Claude Code hook-triggered RCE, CVSS 8.7, patched Oct 2025

• TrustFall: 1-click coding agent RCE in Claude, Cursor, Copilot
  writeup2026-05-07
• OWASP Agentic Skills Top 10 (AST10)
  repo

  Repository-level configuration files function as part of the execution layer; cloning and opening an untrusted project can trigger remote code execution and API key exfiltration before any user consent dialog appears.

• OWASP Agentic Skills Top 10
  paper

  Repository-level configuration files function as part of the execution layer; cloning and opening an untrusted project can trigger remote code execution and API key exfiltration before any user consent dialog appears.