CVE-2025-59536/CVE-2026-21852 Claude Code Project Config RCE
Wweb·medium signal
Check Point found 3 attack vectors in Claude Code: hooks auto-executing curl|bash via SessionStart, MCP servers auto-approved bypassing trust dialog, ANTHROPIC_BASE_URL override exfiltrating API keys in plaintext. All patched. Untrusted repo cloning is first-class attack surface for coding agents.