Fetching from the wire…
01
02
03
04
05
06
07
08
Security2026-03-23 · source-backed
Check Point Research disclosed that Claude Code's .claude/settings.json hooks can be weaponized in untrusted repos to execute arbitrary shell commands and exfiltrate Anthropic API keys by redirecting ANTHROPIC_BASE_URL to an attacker-controlled MitM proxy (Check Point). Both CVEs are patched, but the pattern — project-level config files that execute before trust is granted — applies to any hook-enabled agentic IDE. Inspect .claude/ directories before opening untrusted repos.
Each link below shares sources, entities, or timing with this story.
Check Point criticizes Claude Code / Shared entities / Same source / Shared topic / Earlier coverage
Linked by a graph relationship (Check Point criticizes Claude Code); both cover Check Point, Check Point Research, Claude Code, CVE; cite the same source (Check Point).
Linked by a graph relationship (Check Point criticizes Claude Code); both cover Check Point Research, Claude Code, CVE; cite the same source (Check Point).
Claude Code uses MCP / Shared entities / Same source / Shared topic / Earlier coverage
Linked by a graph relationship (Claude Code uses MCP); both cover Check Point Research, CVE; cite the same source (Check Point).
Linked by a graph relationship (Claude Code uses MCP); both cover Check Point Research, CVE; cite the same source (Check Point).
Check Point criticizes Claude Code / Shared entities / Same source / Shared topic / Earlier coverage / Tension
Linked by a graph relationship (Check Point criticizes Claude Code); both cover Check Point Research, Claude Code, CVE; cite the same source (Check Point).
Check Point criticizes Claude Code / Shared entities / Same source domain / Shared topic / What happened next
Linked by a graph relationship (Check Point criticizes Claude Code); both cover Check Point, Claude Code; reported by the same outlet (research.checkpoint.com).
Check Point criticizes Claude Code / Shared entities / Shared topic / What happened next / Tension
Linked by a graph relationship (Check Point criticizes Claude Code); both cover Claude Code, IDE; overlapping topics (attack, claude, code, config).
Linked by a graph relationship (Check Point criticizes Claude Code); both cover Claude Code, IDE; overlapping topics (agentic, claude, code).