{
  "schema_version": "1.6.0",
  "id": "ACVE-2025-0006",
  "aliases": [
    "CVE-2025-59536"
  ],
  "published": "2026-09-19T00:00:00Z",
  "modified": "2026-09-19T00:00:00Z",
  "summary": "Claude Code project hooks can inject configuration and commands",
  "details": "## What the vulnerability is\n\nClaude Code project-scoped hooks can cause repository-controlled content to influence configuration or command execution. The referenced claim is associated with Claude Code releases before the fixed boundary recorded by this advisory. The risk is specific to hooks loaded from a project rather than only from a user-controlled global configuration.\n\n## Which configuration is exposed\n\nThe matcher exposes Claude Code when `harness.id` is `claude-code`, `harness.version` is below `1.0.39`, and at least one entry in `hooks` has `scope` equal to `project`. It deliberately does not require a particular hook event, command, script path, or permission mode. A project hook is therefore the harness/tool combination that makes the rule match; the lockfile signal does not prove that the hook is malicious or that it has run.\n\n## How ACVE detects it\n\nACVE reads `harness.id`, `harness.version`, and `hooks[].scope`. It cannot inspect the hook's command body, source provenance, script contents, or whether a user approved execution. The fixed boundary is represented as `1.0.39` (unverified — see Grounding needed), and the finding should be treated as a review signal for any project-scoped hook.\n\n## Fix\n\n1. Upgrade Claude Code to `1.0.39` or later after confirming the release boundary.\n2. Review every project-scoped hook, remove hooks that are not required, and require an explicit approval boundary before running repository-controlled commands.\n\n## Grounding needed\n\n`acve advisory ground` must confirm the affected range and fixed Claude Code release for `CVE-2025-59536`, including whether `1.0.39` is the correct boundary.\n\n## References\n\nSee `references` for primary sources.",
  "affected": [
    {
      "package": {
        "ecosystem": "AgentHarness",
        "name": "claude-code"
      },
      "ranges": [
        {
          "type": "SEMVER",
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "1.0.39"
            }
          ]
        }
      ]
    }
  ],
  "references": [
    {
      "type": "ADVISORY",
      "url": "https://nvd.nist.gov/vuln/detail/CVE-2025-59536"
    },
    {
      "type": "REPORT",
      "url": "https://example.com/research/acve"
    },
    {
      "type": "FIX",
      "url": "https://github.com/pickbitsai/acve/issues?q=CVE-2025-59536"
    }
  ],
  "severity": [
    {
      "type": "CVSS_V3",
      "score": "8"
    }
  ],
  "database_specific": {
    "severity": "HIGH",
    "acve": {
      "specVersion": 1,
      "status": "candidate",
      "vulnClasses": [
        "hook-injection",
        "config-file-injection"
      ],
      "cwe": [
        "CWE-94"
      ],
      "taxonomy": {
        "owasp_asi": [
          "ASI05 Improper Output Handling"
        ],
        "atlas": [
          "AML.T0051"
        ]
      },
      "matcher": {
        "all": [
          {
            "field": "harness.id",
            "op": "eq",
            "value": "claude-code"
          },
          {
            "field": "harness.version",
            "op": "semverRange",
            "value": "<1.0.39"
          },
          {
            "some": "hooks",
            "where": {
              "field": "scope",
              "op": "eq",
              "value": "project"
            }
          }
        ]
      },
      "fix": {
        "summary": "Upgrade Claude Code to the confirmed fixed release and review project hooks.",
        "actions": [
          {
            "type": "upgrade",
            "target": "harness:claude-code",
            "to": "1.0.39",
            "why": "Use the fixed release."
          }
        ]
      },
      "exposure": "repo-controlled",
      "exploitation": {
        "vector": "malicious project or server configuration",
        "userInteraction": "required",
        "kev": false
      },
      "grounding": {
        "osv": {
          "checkedAt": "2026-09-20T02:43:23Z",
          "found": false,
          "aliasesConfirmed": [],
          "packagesConfirmed": [],
          "fixedVersionsConfirmed": [],
          "cvss": []
        },
        "nvd": {
          "checkedAt": "2026-09-20T02:43:23Z",
          "found": true,
          "cvss": 8.8,
          "published": "2025-10-03T07:15:44.550"
        },
        "kev": {
          "checkedAt": "2026-09-20T02:43:23Z",
          "listed": false
        },
        "registry": {
          "checkedAt": "2026-09-20T02:43:23Z",
          "confirmed": [],
          "missing": []
        }
      }
    }
  }
}