Fetching from the wire…
01
02
03
04
05
06
07
08
Security2026-03-19 · source-backed
Check Point Research disclosed that ANTHROPIC_BASE_URL in a repository's .claude config can redirect all API traffic — including full authorization headers — to an attacker-controlled server before the user reads a trust dialog, exfiltrating API keys in plaintext. A second vector abuses Hook automation to execute arbitrary shell commands the instant Claude Code opens an untrusted project. Defense: treat .claude/ project files like executable code in your threat model. Never open unreviewed repos in Claude Code. Check Point Research
Each link below shares sources, entities, or timing with this story.
Check Point Research criticizes Claude Code / Shared entities / Same source / Shared topic / Earlier coverage
Linked by a graph relationship (Check Point Research criticizes Claude Code); both cover Check Point Research, Claude Code, CVE; cite the same source (Check Point Research).
Check Point Research criticizes Claude Code / Shared entities / Same source / Shared topic / What happened next
Linked by a graph relationship (Check Point Research criticizes Claude Code); both cover Check Point Research, Claude Code, CVE; cite the same source (Check Point Research).
Claude Code uses MCP / Shared entities / Same source / Shared topic / Earlier coverage
Linked by a graph relationship (Claude Code uses MCP); both cover Check Point Research, CVE; cite the same source (Check Point Research).
Linked by a graph relationship (Claude Code uses MCP); both cover Check Point Research, CVE, Never; cite the same source (Check Point Research).
Check Point Research criticizes Claude Code / Shared entities / Same source / Shared topic / What happened next / Tension
Linked by a graph relationship (Check Point Research criticizes Claude Code); both cover Check Point Research, Claude Code, CVE, Never; cite the same source (Check Point Research).
Check Point Research criticizes Claude Code / Shared entities / Shared topic / Earlier coverage
Linked by a graph relationship (Check Point Research criticizes Claude Code); both cover Claude Code, Defense, Hook; overlapping topics (claude, code).
Check Point Research criticizes Claude Code / Shared entities / Same source / Shared topic / Earlier coverage
Linked by a graph relationship (Check Point Research criticizes Claude Code); both cover Check Point Research, CVE; cite the same source (Check Point Research).
Claude Code uses MCP / Shared entity: CVE / Shared topic / Earlier coverage / Tension
Linked by a graph relationship (Claude Code uses MCP); both cover CVE; overlapping topics (arbitrary, attack, check, code, command).