Summary
Repository settings can skip the workspace trust prompt. This high-severity finding affects Claude Code.
Disclosure timeline
- Public disclosure
Credits
Cantina · Agent-discovered and human-verified
Vulnerability disclosure
Repository settings can skip the workspace trust prompt
CVE-2026-33068
- Affected product
- Claude Code
- Severity
- High · CVSS 8.8
- Weakness
- CWE-807
- Disclosed