CVE-2025-65099 — Claude Code vulnerable to command execution prior to startup trust dialog

CVE-2025-65099

Claude Code vulnerable to command execution prior to startup trust dialog PUBLISHED

Description (CNA)

Claude Code is an agentic coding tool. Prior to version 1.0.39, when running on a machine with Yarn 3.0 or above, Claude Code could have been tricked to execute code contained in a project via yarn plugins before the user accepted the startup trust dialog. Exploiting this would have required a user to start Claude Code in an untrusted directory and to be using Yarn 3.0 or above. This issue has been patched in version 1.0.39.

Affected (CNA)

Vendor / product	Versions
anthropics / claude-code	affected < 1.0.39

CWE

CWE-94

References

https://github.com/anthropics/claude-code/security/advisories/GHSA-5hhx-v7f6-x7gv

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.