CVE-2025-59041

UNKNOWN

Published Unknown

Actions:

Expert Analysis

Professional remediation guidance

Get tailored security recommendations from our analyst team for CVE-2025-59041. We'll provide specific mitigation strategies based on your environment and risk profile.

No CVSS data available

Description

Claude Code is an agentic coding tool. At startup, Claude Code executed a command templated in with `git config user.email`. Prior to version 1.0.105, a maliciously configured user email in git could be used to trigger arbitrary code execution before a user accepted the workspace trust dialog. Users on standard Claude Code auto-update will have received this fix automatically. Users performing manual updates are advised to update to version 1.0.105 or the latest version.

Available Exploits

No exploits available for this CVE.

Related News

No news articles found for this CVE.

EU Vulnerability Database

Monitored by ENISA for EU cybersecurity

EU Coordination

EU Coordinated

Exploitation Status

No Known Exploitation

EUVD ID

View on ENISA

ENISA Analysis

Malicious code in bioql (PyPI)

Affected Products (ENISA)

anthropics

claude-code

ENISA Scoring

CVSS Score (4.0)

8.7

/10

CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N

EPSS Score

0.100

probability

ENISA References

https://github.com/anthropics/claude-code/security/advisories/GHSA-j4h9-wv2m-wrf7

https://nvd.nist.gov/vuln/detail/CVE-2025-59041

https://www.npmjs.com/package/@anthropic-ai/claude-code/v/1.0.105

Data provided by ENISA EU Vulnerability Database. Last updated: October 3, 2025

GitHub Security Advisories

Community-driven vulnerability intelligence from GitHub

✓ GitHub Reviewed HIGH

Claude Code vulnerable to arbitrary code execution caused by maliciously configured git email

GHSA-j4h9-wv2m-wrf7

Advisory Details

At startup, Claude Code constructed a shell command that interpolated the value of `git config user.email` from the current workspace. If an attacker controlled the repository’s Git config (e.g., via a malicious `.git/config`) and set `user.email` to a crafted payload, the unescaped interpolation could trigger arbitrary command execution **before** the user accepted the workspace-trust dialog. The issue affects versions prior to `1.0.105`. The fix in `1.0.105` avoids executing commands built from untrusted configuration and properly validates/escapes inputs. * **Patches:** Update to `@anthropic-ai/claude-code` `1.0.105` or later. * **Workarounds:** Open only trusted workspaces and inspect repository `.git/config` before launch; avoid inheriting untrusted Git configuration values. > Thank you to the NVIDIA AI Red Team for reporting this issue!

Affected Packages

npm @anthropic-ai/claude-code

ECOSYSTEM: ≥0 <1.0.105

CVSS Scoring

CVSS Score

7.5

CVSS Vector


                                    CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:P/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N

References

WEB https://github.com/anthropics/claude-code/security/advisories/GHSA-j4h9-wv2m-wrf7

ADVISORY https://nvd.nist.gov/vuln/detail/CVE-2025-59041

PACKAGE https://github.com/anthropics/claude-code

WEB https://www.npmjs.com/package/@anthropic-ai/claude-code/v/1.0.105

Advisory provided by GitHub Security Advisory Database. Published: September 10, 2025, Modified: September 25, 2025

Published: Unknown

Last Modified: Unknown

Copied to clipboard!