Security Vulnerability in Claude Code Allows Remote Code Execution via Malicious Pull Requests

The post describes a security issue in Claude Code where a malicious pull request (PR) can exploit trust boundaries to achieve remote code execution (RCE). It states that simply opening Claude Code on a PR may silently trigger attacker-controlled payloads. The vulnerability arises from unbroken trust assumptions within the system.