CVE-2026-40068
CVE-2026-40068 · Claude Code arbitrary code execution via git worktree commondir trust dialog bypass
Здесь приведены факты из открытых источников об уязвимостях. Перед обновлением ознакомьтесь с исходным сообщением.
In versions 2.1.63 through 2.1.83 of Claude Code, the folder trust determination logic used the git worktree commondir file without validating its contents. An attacker could craft a malicious repository with a commondir file pointing to a path the victim had previously trusted, causing Claude Code to bypass its trust confirmation dialog and immediately execute hooks defined in `.claude/settings.json`. Exploitation requires the victim to clone the malicious repository and run Claude Code within it, and the attacker must know or guess a path the victim had already trusted. This issue has been fixed in version 2.1.84.
CVSS 7.7 · Высокий · EPSS 0,3% · Есть исправление
- Опубликовано
- Обновлено
Стек: node
Затронутые продукты и версии
claude-code
- Версии
- >= 2.1.63, < 2.1.84: Затронуто
Нет опубликованного исправления
@anthropic-ai/claude-code npm
- Затронутые диапазоны версий
- SEMVER: ≥ 2.1.63, < 2.1.84
Обновитесь до 2.1.84