{"id":"GHSA-4fgq-fpq9-mr3g","revision":"ccd91f6a361e418089b63fe090a15cb3","records":[{"revision":"ccd91f6a361e418089b63fe090a15cb3","observedAt":"2026-10-24T13:17:17.793+00:00","statement":{"source":"osv","id":"GHSA-4fgq-fpq9-mr3g","aliases":["CVE-2025-59536"],"title":"Claude Code can execute commands prior to the startup trust dialog ","description":"Due to a bug in the startup trust dialog implementation, Claude Code could be tricked to execute code contained in a project before the user accepted the startup trust dialog. Exploiting this requires a user to start Claude Code in an untrusted directory. \n\nUsers on standard Claude Code auto-update will have received this fix automatically. Users performing manual updates are advised to update to the latest version.\n\nThank you to https://hackerone.com/avivdon for reporting this issue!","state":0,"publishedAt":"2025-10-03T14:16:34+00:00","modifiedAt":"2025-10-03T14:57:25.457969+00:00","affected":[{"ecosystem":"npm","name":"@anthropic-ai/claude-code","ranges":[{"type":"SEMVER","events":[{"kind":"introduced","version":"0"},{"kind":"fixed","version":"1.0.111"}]}],"versions":[],"rawVersionEvidence":null}],"metrics":[{"system":"CVSS_V4","vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N","score":null,"severity":null},{"system":"Publisher rating","vector":null,"score":null,"severity":"HIGH"}],"references":["https://github.com/anthropics/claude-code/security/advisories/GHSA-4fgq-fpq9-mr3g","https://nvd.nist.gov/vuln/detail/CVE-2025-59536","https://github.com/anthropics/claude-code"],"sourceUrl":"https://github.com/advisories/GHSA-4fgq-fpq9-mr3g","license":"GitHub Advisory Database · CC-BY-4.0","key":"osv:GHSA-4fgq-fpq9-mr3g","identifiers":["GHSA-4fgq-fpq9-mr3g","CVE-2025-59536"]},"retained":false,"historicalAffected":[]}],"coverage":[]}