CWE-356 Missing User Interaction for Potentially Unsafe Action

The product encounters a situation in which some of its behavior is security-critical and should be authorized by a human before progressing, but it does not properly consult with the human user or its proxy (such as UI approval dialogues or pre-set policies) to determine whether it is allowed to perform the potentially dangerous behavior.

• Non-Repudiation: Hide Activities — This makes it easier for attackers to trick users into inflicting damage to their system.

• [Architecture and Design] Product systems should warn users that a potentially dangerous action may occur if the user proceeds. For example, if the user downloads a file from an unknown source and attempts to execute the file on their machine, then the application's GUI can indicate that the file is unsafe.

• CVE-2000-0788: Document editor runs macros without asking for user approval. • CVE-2003-0660: OS does not prompt the user to download and install ActiveX controls when the system is low on memory. • CVE-2008-2540: Chain: Web browser does not prompt the user before downloading an object that has an unrecognized content type (CWE-356), leading to untrusted search path (CWE-426) on a different OS. • CVE-2026-10591: AI agentic IDE product for cloud service does not consult the "Human-in-the-Loop" (HITL) in some security-critical decisions, allowing rewrite of its own Model Context Protocol (MCP), leading to configuration change and code execution [REF-1582]. • CVE-2026-33068: AI agentic coding tool trusts a potentially-untrusted configuration input, causing it to skip a "trust confirmation dialog" before conducting potentially dangerous actions. • CVE-2025-59828: Chain: AI agentic coding tool auto-executes Yarn plugins in untrusted directories (CWE-696) before asking the user to approve the action (CWE-356). • CVE-1999-1055: Product does not warn user when document contains certain dangerous functions or macros. • CVE-1999-0794: Product does not warn user when document contains certain dangerous functions or macros. • CVE-2000-0277: Product does not warn user when document contains certain dangerous functions or macros. • CVE-2000-0517: Product does not warn user about a certificate if it has already been accepted for a different site. Possibly resultant. • CVE-2005-0602: File extractor does not warn user if setuid/setgid files could be extracted. Overlaps privileges/permissions. • CVE-2000-0342: Chain: E-mail client allows bypass of warning for dangerous attachments (CWE-356) via a Windows .LNK file that refers to the attachment (CWE-64).