---
id: CVE-2026-55607
title: >-
  Claude Code: @anthropic-ai/claude-code: Claude Code: Arbitrary code execution
  through git directory confusion (CVE-2026-55607)
summary: >-
  A flaw was found in Claude Code, an agentic coding tool, in its handling of
  worktrees. This vulnerability allowed the creation of specially named
  worktrees and navigation outside of the intended secure environment, leading
  to what is known…
severity: high
cvss: 7.1
cvssVector: 'CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H'
cvssSource: vendor
cwe:
  - CWE-59
  - CWE-22
  - CWE-78
vendor: Red Hat
product: OpenShift Lightspeed
affected:
  - openshift_lightspeed
patched:
  - '@anthropic-ai/claude-code 2.1.163'
published: '2026-06-29'
updated: '2026-10-15'
sourceUpdated: '2026-10-15T11:04:51+00:00'
source: CSAF
sourceUrl: 'https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-55607.json'
references:
  - url: >-
      https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-55607.json
  - url: 'https://access.redhat.com/security/cve/CVE-2026-55607'
  - url: 'https://bugzilla.redhat.com/show_bug.cgi?id=2494422'
  - url: 'https://www.cve.org/CVERecord?id=CVE-2026-55607'
  - url: 'https://nvd.nist.gov/vuln/detail/CVE-2026-55607'
  - url: >-
      https://github.com/anthropics/claude-code/security/advisories/GHSA-7835-87q9-rgvv
  - url: 'https://github.com/anthropics/claude-code/releases/tag/v2.1.163'
  - url: 'https://github.com/advisories/GHSA-7835-87q9-rgvv'
tags:
  - csaf
  - vex
  - red-hat
  - ghsa
  - npm
epss: 0.00687
epssPercentile: 0.52497
aliases:
  - GHSA-7835-87q9-rgvv
ecosystem: npm
ingestedAt: '2026-07-24T17:34:27.459Z'
---

## Overview

A flaw was found in Claude Code, an agentic coding tool, in its handling of worktrees. This vulnerability allowed the creation of specially named worktrees and navigation outside of the intended secure environment, leading to what is known as a 'git directory confusion attack'. By manipulating symbolic links and how git monitors file system changes, an attacker could overwrite important user files, potentially leading to unauthorized code execution on the user's system. This attack requires a user to interact with a malicious code repository.

## Vendor advisories

- **Red Hat VEX** · Important · affected: OpenShift Lightspeed · no fix planned: OpenShift Lightspeed · updated 2026-10-15 · [vex](https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-55607.json)

**Claude Code: @anthropic-ai/claude-code: Claude Code: Arbitrary code execution through git directory confusion** — rated Important by Red Hat. Released 2026-06-29, updated 2026-10-15.

Affected:

- OpenShift Lightspeed

No fix planned:

- OpenShift Lightspeed

## Remediation

Affected

Workarounds / mitigations:

- Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.

## Package advisory (CVE-2026-55607)

Affected packages:

- `@anthropic-ai/claude-code >= 2.1.38, < 2.1.163`

Patched in:

- `@anthropic-ai/claude-code 2.1.163`

Source: https://github.com/advisories/GHSA-7835-87q9-rgvv