{"id":"CVE-2026-55607","title":"Claude Code: @anthropic-ai/claude-code: Claude Code: Arbitrary code execution through git directory confusion (CVE-2026-55607)","summary":"A flaw was found in Claude Code, an agentic coding tool, in its handling of worktrees. This vulnerability allowed the creation of specially named worktrees and navigation outside of the intended secure environment, leading to what is known…","severity":"high","cvss":7.1,"cvssVector":"CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H","cvssSource":"vendor","cwe":["CWE-59","CWE-22","CWE-78"],"vendor":"Red Hat","product":"OpenShift Lightspeed","affected":["openshift_lightspeed"],"patched":["@anthropic-ai/claude-code 2.1.163"],"published":"2026-06-29","updated":"2026-10-15","sourceUpdated":"2026-10-15T11:04:51+00:00","source":"CSAF","sourceUrl":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-55607.json","references":[{"url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-55607.json"},{"url":"https://access.redhat.com/security/cve/CVE-2026-55607"},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2494422"},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-55607"},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-55607"},{"url":"https://github.com/anthropics/claude-code/security/advisories/GHSA-7835-87q9-rgvv"},{"url":"https://github.com/anthropics/claude-code/releases/tag/v2.1.163"},{"url":"https://github.com/advisories/GHSA-7835-87q9-rgvv"}],"tags":["csaf","vex","red-hat","ghsa","npm"],"epss":0.00687,"epssPercentile":0.52497,"aliases":["GHSA-7835-87q9-rgvv"],"ecosystem":"npm","ingestedAt":"2026-07-24T17:34:27.459Z","slug":"CVE-2026-55607","body":"## Overview\n\nA flaw was found in Claude Code, an agentic coding tool, in its handling of worktrees. This vulnerability allowed the creation of specially named worktrees and navigation outside of the intended secure environment, leading to what is known as a 'git directory confusion attack'. By manipulating symbolic links and how git monitors file system changes, an attacker could overwrite important user files, potentially leading to unauthorized code execution on the user's system. This attack requires a user to interact with a malicious code repository.\n\n## Vendor advisories\n\n- **Red Hat VEX** · Important · affected: OpenShift Lightspeed · no fix planned: OpenShift Lightspeed · updated 2026-10-15 · [vex](https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-55607.json)\n\n**Claude Code: @anthropic-ai/claude-code: Claude Code: Arbitrary code execution through git directory confusion** — rated Important by Red Hat. Released 2026-06-29, updated 2026-10-15.\n\nAffected:\n\n- OpenShift Lightspeed\n\nNo fix planned:\n\n- OpenShift Lightspeed\n\n## Remediation\n\nAffected\n\nWorkarounds / mitigations:\n\n- Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.\n\n## Package advisory (CVE-2026-55607)\n\nAffected packages:\n\n- `@anthropic-ai/claude-code >= 2.1.38, < 2.1.163`\n\nPatched in:\n\n- `@anthropic-ai/claude-code 2.1.163`\n\nSource: https://github.com/advisories/GHSA-7835-87q9-rgvv","depth":"twilight","depthScore":39,"depthScoreParts":{"impact":39.1,"likelihood":0.1,"exploitation":0,"ransomware":0},"changes":[{"seq":222228,"id":"CVE-2026-55607","ts":1792065102204,"field":"cvss","old":null,"new":"7.1"}]}