Claude Code RCE Flaw Lets Malicious Pull Requests Execute Code on Developer Systems

A malicious pull request has the potential to turn Claude Code’s project-scoped Model Context Protocol (MCP) configuration into a trigger for code execution,...