CVE-2026-40068
CVE-2026-40068 · Claude Code arbitrary code execution via git worktree commondir trust dialog bypass
Cette page présente des faits issus de sources publiques. Consultez l’avis original avant toute mise à jour.
In versions 2.1.63 through 2.1.83 of Claude Code, the folder trust determination logic used the git worktree commondir file without validating its contents. An attacker could craft a malicious repository with a commondir file pointing to a path the victim had previously trusted, causing Claude Code to bypass its trust confirmation dialog and immediately execute hooks defined in `.claude/settings.json`. Exploitation requires the victim to clone the malicious repository and run Claude Code within it, and the attacker must know or guess a path the victim had already trusted. This issue has been fixed in version 2.1.84.
CVSS 7.7 · Élevée · EPSS 0,3% · Correctif disponible
- Publication
- Mise à jour
Pile logicielle: node
Produits et versions concernés
claude-code
- Versions du logiciel
- >= 2.1.63, < 2.1.84: Concernée
Aucun correctif publié
@anthropic-ai/claude-code npm
- Plages de versions concernées
- SEMVER: ≥ 2.1.63, < 2.1.84
Mettez à jour vers 2.1.84