ZeroDay Findings
Sign inSign up

Vulnerabilities

Vulnerability · CVE-2026-33068

Claude Code is an agentic coding tool.

Published Mar 20, 2026 · catalog updated Jun 17, 2026 · anthropic claude code

Severity
High7.7
Known exploitation
Not in CISA/VulnCheck KEV
EPSS
0.6%
Remediation
Advisory link
Affected products
cpe anthropic/claude code

Claude Code is an agentic coding tool. Versions prior to 2.1.53 resolved the permission mode from settings files, including the repo-controlled .claude/settings.json, before determining whether to display the workspace trust confirmation dialog. A malicious repository could set permissions.defaultMode to bypassPermissions in its committed .claude/settings.json, causing the trust dialog to be silently skipped on first open. This allowed a user to be placed into a permissive mode without seeing the trust confirmation prompt, making it easier for an attacker-controlled repository to gain tool execution without explicit user consent. This issue has been patched in version 2.1.53.

Technical analysis

Mechanism and impact are interpreted from ingested advisories — not independent exploit research.

  • CWE classification

  • Prerequisites and impact

    Follow the original vendor advisory for access prerequisites and impact. This catalog does not invent exploit conditions.

How to fix CVE-2026-33068

What to do

Three reads of the same public record: the decision, the versions on file, and the signals. Confirm the vendor advisory before you patch. This page does not publish exploit steps.

Executive

This is a public record, not a confirmed incident. CVE-2026-33068 is a high issue in anthropic claude code (CVSS 7.7). CISA does not currently list it as known exploited. Next step: Compare installed versions with the linked vendor advisory before changing production.

System administrator

Check whether anthropic claude code is installed. Ranges on record: anthropic/claude code. Compare installed versions with the linked vendor advisory before changing production.

Security analyst

CVSS 7.7. EPSS 0.6%. CISA does not currently list it as known exploited. Weaknesses: CWE-807. Sources: cve_org, epss, nvd. Exploit links, when listed below, point at the original publisher.

Related intelligence

  • Exploitation evidence

    Not listed as known exploited in CISA KEV. Not in CISA KEV or VulnCheck KEV.

  • Safe detection guidance

    Compare installed versions with the affected ranges below and verify the advisory from the original publisher. This site stores metadata and outbound links only; it does not ship exploit code or proof-of-concept payloads.

Code

The project this record applies to. Exploit listings stay in References.

Timeline

Detection, updates, and resolution for this record.

  1. Mar 20, 2026 · NIST NVD

    Detected

    Claude Code is an agentic coding tool. Versions prior to 2.1.53 resolved the permission mode from settings files, including the repo-controlled .claude/settings.json, before determining whether to display the workspace trust confirmation dialog. A malicious repository could set permissions.defaultMode to bypassPermissions in its committed .claude/settings.json, causing the trust dialog to be silen

  2. Jun 17, 2026 · NIST NVD

    Updated

    Claude Code is an agentic coding tool. Versions prior to 2.1.53 resolved the permission mode from settings files, including the repo-controlled .claude/settings.json, before determining whether to display the workspace trust confirmation dialog. A malicious repository could set permissions.defaultMode to bypassPermissions in its committed .claude/settings.json, causing the trust dialog to be silen

Affected versions

Enter an installed version to get a verified affected / not-affected result against the ranges below.

  • cpe anthropic/claude codeversion unspecified

Sources

  • CVE.orgVulnerability recordCVE-2026-33068

    Official CVE identifier

    cve.org
  • FIRST EPSSExploitation probabilityCVE-2026-33068

    30-day exploitation probability 0.6%

    first.org
  • NIST NVDVulnerability recordCVE-2026-33068

    Claude Code is an agentic coding tool. Versions prior to 2.1.53 resolved the permission mode from settings files, including the repo-controlled .claude/settings.json, before determining whether to display the workspace trust confirmation dialog. A malicious repository could set p

    nvd.nist.gov

References

Freshness

Last verified in this catalog Oct 18, 2026. Significant claims (KEV, EPSS, CVSS, affected ranges) come from the source rows above — open the original publisher for the authoritative advisory.