{"uuid": "27316e40-284f-4d59-8f4a-8b8f8943559b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-59536", "type": "published-proof-of-concept", "source": "https://t.me/cve0day/406", "content": "CVE-2025-59536\n\nClaude Code is an agentic coding tool. Versions before 1.0.111 were vulnerable to Code Injection due to a bug in the startup trust dialog implementation. Claude Code could be tricked to execute code contained in a project before the user accepted the startup trust dialog. Exploiting this requires a user to start Claude Code in an untrusted directory. Users on standard Claude Code auto-update will have received this fix automatically. Users performing manual updates are advised to update to the latest version. This issue is fixed in version 1.0.111.", "creation_timestamp": "2026-08-28T00:00:32.850426Z"}