{"id":"EUVD-2025-32507","enisaUuid":"ac487ddf-9a43-3f4f-b89b-eac1a392406d","description":"Claude Code is an agentic coding tool. Versions before 1.0.111 were vulnerable to Code Injection due to a bug in the startup trust dialog implementation. Claude Code could be tricked to execute code contained in a project before the user accepted the startup trust dialog. Exploiting this requires a user to start Claude Code in an untrusted directory. Users on standard Claude Code auto-update will have received this fix automatically. Users performing manual updates are advised to update to the latest version. This issue is fixed in version 1.0.111.","datePublished":"Oct 3, 2025, 6:34:48 AM","dateUpdated":"Oct 3, 2025, 1:26:23 PM","baseScore":8.7,"baseScoreVersion":"4.0","baseScoreVector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N","references":"https://github.com/anthropics/claude-code/security/advisories/GHSA-4fgq-fpq9-mr3g\n","aliases":"CVE-2025-59536\nGHSA-4fgq-fpq9-mr3g\n","assigner":"GitHub_M","epss":24.89,"enisaIdProduct":[{"id":"ad4cf173-06f3-31e5-ab2e-651ba84dcb13","product":{"name":"claude-code","vendor":{"name":"anthropics"}},"product_version":"\u003c 1.0.111"}],"enisaIdVendor":[{"id":"07e6ca03-ec56-3df4-96bd-c253d9101427","vendor":{"name":"anthropics"}}],"enisaIdVulnerability":[{"id":"6cc5ba7b-37b9-383f-a8dd-08302a3a3a7d","vulnerability":{"id":"GHSA-4fgq-fpq9-mr3g","description":"Claude Code can execute commands prior to the startup trust dialog ","datePublished":"Oct 3, 2025, 2:16:34 PM","dateUpdated":"Oct 3, 2025, 2:16:34 PM","baseScore":0.0,"references":"https://github.com/anthropics/claude-code/security/advisories/GHSA-4fgq-fpq9-mr3g\nhttps://nvd.nist.gov/vuln/detail/CVE-2025-59536\nhttps://github.com/anthropics/claude-code\n","enisa_id":"EUVD-2025-32507\n","aliases":"CVE-2025-59536\nGHSA-4fgq-fpq9-mr3g\n","epss":0.0,"dataProcessed":"Oct 25, 2026, 1:51:14 AM","vulnerabilityProduct":[],"vulnerabilityVendor":[]}},{"id":"9de8fa5e-1030-3d38-b220-dede9d0b3772","vulnerability":{"id":"CVE-2025-59536","description":"Claude Code is an agentic coding tool. Versions before 1.0.111 were vulnerable to Code Injection due to a bug in the startup trust dialog implementation. Claude Code could be tricked to execute code contained in a project before the user accepted the startup trust dialog. Exploiting this requires a user to start Claude Code in an untrusted directory. Users on standard Claude Code auto-update will have received this fix automatically. Users performing manual updates are advised to update to the latest version. This issue is fixed in version 1.0.111.","datePublished":"Oct 3, 2025, 6:34:48 AM","dateUpdated":"Oct 3, 2025, 1:26:23 PM","status":"PUBLISHED","baseScore":8.7,"baseScoreVersion":"4.0","baseScoreVector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N","references":"https://github.com/anthropics/claude-code/security/advisories/GHSA-4fgq-fpq9-mr3g\n","enisa_id":"EUVD-2025-32507\n","assigner":"GitHub_M","epss":24.89,"dataProcessed":"Oct 29, 2026, 7:13:55 AM","vulnerabilityProduct":[{"id":"12ab8a11-79de-3969-a914-c2f34945adfa","product":{"name":"claude-code","vendor":{"name":"anthropics"}},"product_version":"\u003c 1.0.111"}],"vulnerabilityVendor":[{"id":"ef6eae2a-6862-3e29-92bf-f4c785702570","vendor":{"name":"anthropics"}}]}}],"enisaIdAdvisory":[]}