{"id":"EUVD-2025-32507","revision":"aa574e5f5a6b4813b73e1fc4e4cca925","records":[{"revision":"aa574e5f5a6b4813b73e1fc4e4cca925","observedAt":"2026-11-07T02:44:38.472+00:00","statement":{"source":"euvd","id":"EUVD-2025-32507","aliases":["CVE-2025-59536","GHSA-4fgq-fpq9-mr3g"],"title":"Claude Code is an agentic coding tool. Versions before 1.0.111 were vulnerable to Code Injection due to a bug in the startup trust dialog implementation. Claude Code could be tricked to execute code contained in a project before the user ac…","description":"Claude Code is an agentic coding tool. Versions before 1.0.111 were vulnerable to Code Injection due to a bug in the startup trust dialog implementation. Claude Code could be tricked to execute code contained in a project before the user accepted the startup trust dialog. Exploiting this requires a user to start Claude Code in an untrusted directory. Users on standard Claude Code auto-update will have received this fix automatically. Users performing manual updates are advised to update to the latest version. This issue is fixed in version 1.0.111.","state":0,"publishedAt":null,"modifiedAt":null,"affected":[],"metrics":[{"system":"EUVD CVSS 4.0","vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N","score":8.7,"severity":null}],"references":["https://github.com/anthropics/claude-code/security/advisories/GHSA-4fgq-fpq9-mr3g"],"sourceUrl":"https://euvd.enisa.europa.eu/vulnerability/EUVD-2025-32507","license":"ENISA EUVD · source terms and attribution apply","enrichment":{"sourceStatus":null,"weaknesses":[],"productCriteria":[],"sourceDates":{"datePublished":"Oct 3, 2025, 6:34:48 AM","dateUpdated":"Oct 3, 2025, 1:26:23 PM"},"relatedAdvisories":[],"note":"EUVD source date text has no stated timezone and is retained without inventing a UTC instant. Related bulletin membership is not an alias, common cause or applicability claim. A missing vector with a zero score is treated as unrated. Complete vendor/product and underlying source evidence remains in the original JSON."},"key":"euvd:EUVD-2025-32507","identifiers":["EUVD-2025-32507","CVE-2025-59536","GHSA-4fgq-fpq9-mr3g"]},"retained":false,"historicalAffected":[]}],"coverage":[]}