Claude Code CVEs: Check Point Exposes RCE and API Key Theft via Project Files
Check Point Research·high signal
Check Point disclosed CVE-2025-59536 (CVSS 8.7, RCE via Hooks) and CVE-2026-21852 (CVSS 5.3, API key exfiltration via ANTHROPIC_BASE_URL redirect). Three distinct attack vectors: (1) malicious `.claude/settings.json` hooks execute shell commands automatically on project open; (2) MCP servers auto-initialize before user trust dialog; (3) ANTHROPIC_BASE_URL override intercepts API keys during initialization. All patched: hooks fix August 2025, MCP bypass fix September 2025, API key fix December 20