CriticalVulnerabilityLLM-specific
CVE-2025-59041: Claude Code code execution via malicious git user email before workspace trust
- Source
- NVD(opens in a new tab)
- Identifier
- CVE-2025-59041
- Published
- Record updated
- Affected
- @anthropic-ai/claude-code < 1.0.105
- Fixed in
- 1.0.105
- released September 4, 2025, 6 days before disclosure
- Known exploitation
- Not listed in the CISA Known Exploited Vulnerabilities catalog at the last check.
- EPSS
- 0.5%
Summary
CVE-2025-59041 affects Claude Code, an agentic coding tool. At startup, Claude Code executed a command templated in with `git config user.email`, so a maliciously configured user email in git could trigger arbitrary code execution before the user accepted the workspace trust dialog in versions prior to 1.0.105.
Mitigation
Fixed in version 1.0.105. Users on standard Claude Code auto-update received the fix automatically; users performing manual updates are advised to update to version 1.0.105 or the latest version.
Topics
Related items
- HighCVE-2026-88968: Claude Code Edit tool symlink race overwrites files outside workspace on macOSSame vendor · NVD/CVE Database
- HighCVE-2026-88066: Claude Desktop on Windows git.exe execution via search pathSame vendor · NVD/CVE Database
- HighCVE-2026-62331: praktor path traversal via Telegram document upload filenamesSame vendor · NVD/CVE Database
- MediumGHSA-w4fh-qvv9-3v23: Model Context Protocol Python SDK: Server bearer-token authentication accepts tokens issued for a different resource serverSame vendor · GitHub Advisory Database
- MediumGHSA-5h93-6whr-6q8j: Model Context Protocol Python SDK: HTTP client transports followed cross-origin redirects carrying custom headers and bodiesSame vendor · GitHub Advisory Database