{
 "id": "AIR-2025-0330",
 "slug": "claude-code-arbitrary-code-execution-via-insufficient-startu",
 "title": "Claude Code Arbitrary Code Execution via Insufficient Startup Warning",
 "summary": "Claude Code failed to properly document that selecting yes to trust folder files allowed the tool to execute them without extra confirmation. The warning prompt was updated to clarify this functionality and prevent accidental execution.",
 "type": "attack_on_ai",
 "categories": [
  "infra_vuln"
 ],
 "severity": 2,
 "targets": [
  "Anthropic",
  "framework_or_tooling"
 ],
 "products": [
  "Claude Code"
 ],
 "incident_date": "2025-09-03",
 "incident_date_precision": "day",
 "first_reported": "2025-09-03",
 "sources": [
  {
   "url": "https://github.com/advisories/GHSA-ph6w-f82w-28w6",
   "publisher": "GitHub Advisory Database",
   "title": "GHSA-ph6w-f82w-28w6: Claude Code Vulnerable to Arbitrary Code Execution Due to Insufficient Startup Warning",
   "published_at": "2025-09-03"
  }
 ],
 "source_count": 1,
 "confidence": 0.95,
 "status": "published",
 "origin": "seed_ghsa",
 "tags": [
  "arbitrary-code-execution"
 ],
 "created_at": "2026-10-18T07:00:14.101Z",
 "updated_at": "2026-10-18T07:00:14.101Z"
}