HIGH

GHSA-4fgq-fpq9-mr3g

Claude Code can execute commands prior to the startup trust dialog

Quick fix

GHSA-4fgq-fpq9-mr3g — @anthropic-ai/claude-code: upgrade to the fixed version with the command below.

npm install @anthropic-ai/claude-code@1.0.111

Details

Due to a bug in the startup trust dialog implementation, Claude Code could be tricked to execute code contained in a project before the user accepted the startup trust dialog. Exploiting this requires a user to start Claude Code in an untrusted directory.

Users on standard Claude Code auto-update will have received this fix automatically. Users performing manual updates are advised to update to the latest version.

Thank you to https://hackerone.com/avivdon for reporting this issue!

Are you affected?

Enter the version of the package you're using.

Affected packages

npm/@anthropic-ai/claude-code

Introduced in: 0Fixed in: 1.0.111

Fixnpm install @anthropic-ai/claude-code@1.0.111

References

https://github.com/anthropics/claude-code/security/advisories/GHSA-4fgq-fpq9-mr3g[WEB]
https://nvd.nist.gov/vuln/detail/CVE-2025-59536[ADVISORY]
https://github.com/anthropics/claude-code[PACKAGE]