CVE-2025-59041
Critical
Description
Claude Code is an agentic coding tool. At startup, Claude Code executed a command templated in with `git config user.email`. Prior to version 1.0.105, a maliciously configured user email in git could be used to trigger arbitrary code execution before a user accepted the workspace trust dialog. Users on standard Claude Code auto-update will have received this fix automatically. Users performing manual updates are advised to update to version 1.0.105 or the latest version.
SeverityCritical
CVSS9.8
Exploit probability—
Product
Anthropic Claude Code
PublishedSep 10, 2025
First seenSep 10, 2025
Weakness typeCWE-94Code injection
How to fix
Update
- anthropic claude_code1.0.105 or later
- @anthropic-ai/claude-code1.0.105 or later
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| anthropic claude_code | v < 1.0.105 | 1.0.105 |
| @anthropic-ai/claude-codenpm | v < 1.0.105 | 1.0.105 |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.