Threats tagged 'ghsa-q5hj-mxqh-vv77'

Claude Code versions 2.1.63 through 2.1.83 contain a vulnerability where the application improperly trusts the git worktree 'commondir' file without validating its contents. This flaw allows an attacker to bypass the trust dialog by crafting a repository with a 'commondir' file pointing to a previously trusted path, enabling immediate execution of malicious hooks defined in '.claude/settings.json'. Exploitation requires the victim to clone a malicious repository and run Claude Code within it, and the attacker must know or guess a trusted path. The issue is fixed in version 2.1.84.