2025-10 · 2025-Q4
Claude Code RCE via Hooks
Layer tags: not yet tagged.
Target
Anthropic Claude Code
Impact
RCE and API token exfiltration when developers clone untrusted repositories; hooks execute before trust dialog
Root Cause
Startup trust dialog allowed code execution from project configs before user accepts