Disclosure summary
CVE-2026-33068 is a high-severity CWE-807 vulnerability in Claude Code. Repository settings can skip the workspace trust prompt. Cantina reproduced the behavior, verified its security impact, and coordinated disclosure with the affected maintainer.
Verification standard
Cantina publishes a disclosure only after reproducing the behavior, validating its security impact, and coordinating remediation with the affected project.