RAXE-2026-040: Claude Code Workspace Trust Dialog Bypass via Repository Settings (CVE-2026-33068) | RAXE Labs

[hackerworkspace@infosec.exchange]

RAXE-2026-040: Claude Code Workspace Trust Dialog Bypass via Repository Settings (CVE-2026-33068) | RAXE Labs

RAXE-2026-040: Claude Code Workspace Trust Dialog Bypass via Repository Settings (CVE-2026-33068) | RAXE Labs

A high-severity configuration loading order defect (`CVE-2026-33068`, CVSS v4.0 7.7 HIGH) in Anthropic's Claude Code CLI tool allows a malicious repository to bypass the workspace trust confirmation dialog.

RAXE (raxe.ai)

Short summary: https://hackerworkspace.com/article/raxe-2026-040-claude-code-workspace-trust-dialog-bypass-via-repository-settings-cve-2026-33068-raxe-labs

#cybersecurity #vulnerability #exploit