CVE-2025-59041: Claude Code vulnerable to arbitrary code execution caused by maliciously configured git email
At startup, Claude Code executed a command templated in with git config user.email. A maliciously configured user email in git could be used to trigger arbitrary code execution before a user accepted the workspace trust dialog.
Users on standard Claude Code auto-update will have received this fix automatically. Users performing manual updates are advised to update to the latest version.
Thank you to the NVIDIA AI Red Team for reporting this issue!
Other sources
Claude Code is an agentic coding tool. At startup, Claude Code executed a command templated in with git config user.email. Prior to version 1.0.105, a maliciously configured user email in git could be used to trigger arbitrary code execution before a user accepted the workspace trust dialog. Users on standard Claude Code auto-update will have received this fix automatically. Users performing manual updates are advised to update to version 1.0.105 or the latest version.
— MITRE
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2025-59041?
CVE-2025-59041 has a critical severity level due to its potential for arbitrary code execution.
How do I fix CVE-2025-59041?
To fix CVE-2025-59041, upgrade Claude Code to version 1.0.105 or later.
What versions of Claude Code are affected by CVE-2025-59041?
CVE-2025-59041 affects all versions of Claude Code prior to version 1.0.105.
What can happen if CVE-2025-59041 is exploited?
If CVE-2025-59041 is exploited, it can lead to arbitrary code execution without user consent.
Who is responsible for addressing the CVE-2025-59041 vulnerability?
The responsibility for addressing CVE-2025-59041 lies with the developers of Claude Code.