--- title: Flaws in Claude Code Put Developers' Machines at Risk description: Three critical security vulnerabilities in Anthropic's Claude Code were discovered by Check Point Research and have since been patched. Two flaws... canonical: https://daily.dev/posts/flaws-in-claude-code-put-developers-machines-at-risk-pkmhpix9s twitter:card: summary_large_image twitter:site: @dailydotdev og:type: website og:site_name: daily.dev og:title: Flaws in Claude Code Put Developers' Machines at Risk | daily.dev og:description: Three critical security vulnerabilities in Anthropic's Claude Code were discovered by Check Point Research and have since been patched. Two flaws... og:url: https://daily.dev/posts/flaws-in-claude-code-put-developers-machines-at-risk-pkmhpix9s og:image: https://api.daily.dev/og/posts/pkMHPIX9S.png og:image:alt: Flaws in Claude Code Put Developers' Machines at Risk og:image:width: 1200 og:image:height: 630 og:locale: en --- > ## Documentation Index > Fetch the complete documentation index at: https://daily.dev/llms.txt > Use this file to discover all available pages before exploring further. # Flaws in Claude Code Put Developers' Machines at Risk **[Dark Reading](https://daily.dev/sources/dr)** · 4 min read · 0 upvotes · 0 comments ## Summary Three critical security vulnerabilities in Anthropic's Claude Code were discovered by Check Point Research and have since been patched. Two flaws (CVE-2025-59536) allowed malicious commands embedded in project repository configuration files — via the Hooks feature and MCP settings — to execute automatically without user consent, enabling full machine takeover. A third flaw (CVE-2026-21852) allowed API credential theft with no user interaction by redirecting API communications to an attacker-controlled server. The vulnerabilities underscore a broader risk: AI coding tools that operate with direct access to source code, local files, and credentials introduce new attack surfaces, including supply chain risks where a single malicious commit could compromise any developer working with an affected repository. Developers should update to the latest version of Claude Code. ## Full article daily.dev links to this article rather than hosting it. Read it at the original source: ## Similar posts on daily.dev - [Security Flaws in Anthropic’s Claude Code Risk Stolen Data, System Takeover](https://daily.dev/posts/security-flaws-in-anthropic-s-claude-code-risk-stolen-data-system-takeover-j81sidgwk) · DevOps.com · 1 upvotes · 0 comments - [Claude's collaboration tools allowed remote code execution](https://daily.dev/posts/claude-s-collaboration-tools-allowed-remote-code-execution-jt8sizuec) · The Register · 0 upvotes · 0 comments - [Claude Code is still vulnerable to an attack Anthropic has already fixed](https://daily.dev/posts/claude-code-is-still-vulnerable-to-an-attack-anthropic-has-already-fixed-z6t1eqrrv) · InfoWorld · 1 upvotes · 0 comments - [Claude Code has an MCP security problem — and your developers are already using it](https://daily.dev/posts/claude-code-has-an-mcp-security-problem-and-your-developers-are-already-using-it-p4ennanew) · CSO Online · 2 upvotes · 0 comments --- Tags: [#ai-coding](https://daily.dev/tags/ai-coding), [#claude-code](https://daily.dev/tags/claude-code), [#mcp](https://daily.dev/tags/mcp), [#security](https://daily.dev/tags/security) [View this post on daily.dev](https://daily.dev/posts/flaws-in-claude-code-put-developers-machines-at-risk-pkmhpix9s) ```json {"@context":"https://schema.org","@graph":[{"@type":"Organization","@id":"https://daily.dev/#organization","name":"daily.dev","url":"https://daily.dev","logo":{"@type":"ImageObject","url":"https://daily.dev/apple-touch-icon.png","width":180,"height":180},"sameAs":["https://twitter.com/dailydotdev","https://github.com/dailydotdev","https://www.linkedin.com/company/daily-dev-ltd"]},{"@type":"WebSite","@id":"https://daily.dev/#website","url":"https://daily.dev","name":"daily.dev","publisher":{"@id":"https://daily.dev/#organization"},"potentialAction":{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https://daily.dev/search?q={search_term_string}"},"query-input":"required name=search_term_string"}}]} {"@context":"https://schema.org","@type":"TechArticle","headline":"Flaws in Claude Code Put Developers' Machines at Risk","url":"https://daily.dev/posts/flaws-in-claude-code-put-developers-machines-at-risk-pkmhpix9s","mainEntityOfPage":{"@type":"WebPage","@id":"https://daily.dev/posts/flaws-in-claude-code-put-developers-machines-at-risk-pkmhpix9s"},"datePublished":"2026-02-25T22:33:51.449Z","dateModified":"2026-03-15T05:24:34.079Z","description":"Three critical security vulnerabilities in Anthropic's Claude Code were discovered by Check Point Research and have since been patched. Two flaws...","image":"https://media.daily.dev/image/upload/f_auto,q_auto/v1/posts/0e2cc99d836e5d9514e55352b52c5f67?_a=AQAEuop","thumbnailUrl":"https://media.daily.dev/image/upload/f_auto,q_auto/v1/posts/0e2cc99d836e5d9514e55352b52c5f67?_a=AQAEuop","isAccessibleForFree":true,"articleSection":"Dark Reading","inLanguage":"en","publisher":{"@type":"Organization","name":"daily.dev","url":"https://daily.dev","logo":{"@type":"ImageObject","url":"https://daily.dev/apple-touch-icon.png","width":180,"height":180}},"author":{"@type":"Organization","name":"Dark Reading","logo":"https://media.daily.dev/image/upload/t_logo,f_auto/v1/logos/dr","url":"https://daily.dev/sources/dr"},"commentCount":0,"discussionUrl":"https://daily.dev/posts/flaws-in-claude-code-put-developers-machines-at-risk-pkmhpix9s","interactionStatistic":[{"@type":"InteractionCounter","interactionType":{"@type":"LikeAction"},"userInteractionCount":0},{"@type":"InteractionCounter","interactionType":{"@type":"CommentAction"},"userInteractionCount":0}],"keywords":"ai-coding,claude-code,mcp,security","timeRequired":"PT4M"} {"@context":"https://schema.org","@type":"BreadcrumbList","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https://daily.dev"},{"@type":"ListItem","position":2,"name":"Dark Reading","item":"https://daily.dev/sources/dr"},{"@type":"ListItem","position":3,"name":"Flaws in Claude Code Put Developers' Machines at Risk"}]} ```