{"data":{"id":"bb6c0ba5-923d-4ef1-8aec-093eadc5e77a","title":"GHSA-q5hj-mxqh-vv77: Claude Code: Trust Dialog Bypass via Git Worktree Spoofing Allows Arbitrary Code Execution","summary":"Claude Code used the git worktree `commondir` file to determine folder trust without validating its contents. A crafted repository whose `commondir` points to a path the victim had already trusted could bypass the trust dialog and run malicious hooks defined in `.claude/settings.json`. Exploitation required the victim to clone the malicious repository, run Claude Code inside it, and the attacker to know or guess a previously trusted path.","solution":"Users on standard Claude Code auto-update have already received the fix. Users performing manual updates are advised to update to the latest version.","labels":["security"],"sourceUrl":"https://github.com/advisories/GHSA-q5hj-mxqh-vv77","publishedAt":"2026-04-24T16:34:03.000Z","cveId":"CVE-2026-40068","cweIds":null,"cvssScore":null,"cvssSeverity":"high","severity":"high","attackType":["other"],"issueType":"vulnerability","affectedPackages":["@anthropic-ai/claude-code@>= 2.1.63, < 2.1.84 (fixed: 2.1.84)"],"affectedPackageNames":["@anthropic-ai/claude-code"],"affectedPackageRefs":["npm:@anthropic-ai/claude-code"],"affectedVendors":["Anthropic"],"affectedVendorsRaw":["Claude Code"],"classifierModel":"claude-haiku-5-5","classifierPromptVersion":"v4","summaryPromptVersion":"v2","headline":null,"headlinePromptVersion":null,"cvssVector":null,"attackVector":null,"attackComplexity":null,"privilegesRequired":null,"userInteraction":null,"exploitMaturity":"unknown","epssScore":0.00314,"epssCheckedAt":"2026-11-10T00:11:22.787Z","kevDateAdded":null,"advisoryAliases":["GHSA-q5hj-mxqh-vv77"],"affectedPackagesSource":null,"affectedPackagesCheckedAt":null,"patchAvailable":true,"disclosureDate":"2026-04-24T16:34:03.000Z","fixReleasedAt":"2026-03-25T23:50:13.505Z","daysToFix":-30,"fixCheckedAt":"2026-10-29T21:37:22.011Z","capecIds":null,"crossRefCount":0,"attackSophistication":"moderate","impactType":["confidentiality","integrity"],"aiComponentTargeted":"plugin","llmSpecific":true,"classifierConfidence":0.93,"researchCategory":null,"atlasIds":null,"fixes":[{"ecosystem":"npm","name":"@anthropic-ai/claude-code","fixedVersion":"2.1.84","matchedVersion":"2.1.84","fixReleasedAt":"2026-03-25T23:50:13.505Z","daysToFix":-30,"match":"ecosystem","source":"registry","status":"found","checkedAt":"2026-10-29T21:37:21.865Z"}]}}