A recent vulnerability in Claude Code could allow malicious code to run automatically without user consent. An immediate update to version 1.0.39 is critical for safe usage.