CVE-2025-59041 — Code Injection in Claude-code

CWE-94 — Code InjectionCWE-78 — OS Command Injection3 documents3 sources
Severity
8.7HIGHNVD
EPSS
0.2%
top 54.87%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
3
Anthropics Claude-codeAnthropic Claude CodeAnthropic-ai Claude-code
Timeline
PublishedSep 10

Description

Claude Code is an agentic coding tool. At startup, Claude Code executed a command templated in with `git config user.email`. Prior to version 1.0.105, a maliciously configured user email in git could be used to trigger arbitrary code execution before a user accepted the workspace trust dialog. Users on standard Claude Code auto-update will have received this fix automatically. Users performing manual updates are advised to update to version 1.0.105 or the latest version.

CVSS vector

CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N

Affected Packages3 packages

▶NVDanthropic/claude_code< 1.0.105
▶CVEListV5anthropics/claude-code< 1.0.105

🔴Vulnerability Details

2
GHSA
Claude Code vulnerable to arbitrary code execution caused by maliciously configured git email↗2025-09-10
▶
OSV
Claude Code vulnerable to arbitrary code execution caused by maliciously configured git email↗2025-09-10
▶