Claude Code CVE-2025-59536 & CVE-2026-21852: What Enterprise Teams Must Know

Two vulnerabilities in Anthropic’s Claude Code, CVE-2025-59536 and CVE-2026-21852, allowed malicious repository configuration files to execute commands before project trust confirmation or redirect API requests to attacker-controlled endpoints, potentially enabling remote code execution and API key theft. The issues were patched in Claude Code versions 1.0.111 and 2.0.65 or later, respectively, and the text recommends updating installations, rotating affected API keys, auditing project configuration files, restricting unapproved network destinations, and treating Claude and MCP configuration files as executable code subject to review and signing. It argues that stolen credentials could expose workspace resources, source code, internal systems, and API budgets, particularly through supply-chain scenarios involving malicious pull requests or repositories. More broadly, it advocates identity-based access controls, least-privilege permissions, short-lived credentials, runtime policy enforcement, monitoring of agent actions, configuration scanning, and detailed audit trails for AI coding agents, while presenting MintMCP Gateway as a tool intended to provide centralized MCP governance, real-time controls, and compliance-oriented logging.

Use this post, company, and trend context to find content marketing opportunities, perform competitive analysis, or address product feature gaps via the Plushcap MCP server or the Plushcap API.