{"data":{"id":"2bf9f0a8-2ea0-4bce-ad9c-997491247419","title":"CVE-2025-52882: Claude Code is an agentic coding tool. Claude Code extensions in VSCode and forks (e.g., Cursor, Windsurf, and…","summary":"CVE-2025-52882 affects Claude Code extensions for VSCode and its forks, such as Cursor, Windsurf, and VSCodium, as well as the JetBrains plugin Claude Code [Beta]. Visiting attacker-controlled webpages lets an attacker make unauthorized websocket connections to the IDE. Exploitation can read arbitrary files, list open files, and obtain selection and diagnostics events, and in VSCode it can also execute code in limited cases involving an open Jupyter Notebook and an accepted malicious prompt.","solution":"Claude released a patch on June 13, 2025. For VSCode and forks, update or uninstall Claude Code for VSCode versions prior to 1.0.24, then restart the IDE. For JetBrains IDEs, update or uninstall Claude Code [Beta] versions prior to 0.1.9, then restart the IDE.","labels":["security"],"sourceUrl":"https://nvd.nist.gov/vuln/detail/CVE-2025-52882","publishedAt":"2025-06-24T20:15:26.543Z","cveId":"CVE-2025-52882","cweIds":["CWE-1385"],"cvssScore":null,"cvssSeverity":null,"severity":"high","attackType":["other"],"issueType":"vulnerability","affectedPackages":["@anthropic-ai/claude-code@>= 0.2.116, < 1.0.24 (fixed: 1.0.24)"],"affectedPackageNames":["@anthropic-ai/claude-code"],"affectedPackageRefs":["npm:@anthropic-ai/claude-code"],"affectedVendors":["Anthropic"],"affectedVendorsRaw":["Claude Code","Claude Code for VSCode","Claude Code [Beta] JetBrains plugin","Cursor","Windsurf","VSCodium","IntelliJ","PyCharm","Android Studio"],"classifierModel":"claude-haiku-5-5","classifierPromptVersion":"v4","summaryPromptVersion":"v2","headline":"Claude Code IDE extensions allow unauthorized websocket connections","headlinePromptVersion":"h1","cvssVector":null,"attackVector":null,"attackComplexity":null,"privilegesRequired":null,"userInteraction":null,"exploitMaturity":"unknown","epssScore":0.00357,"epssCheckedAt":"2026-11-04T00:12:27.710Z","kevDateAdded":null,"advisoryAliases":["GHSA-9f65-56v6-gxw7"],"affectedPackagesSource":"ghsa","affectedPackagesCheckedAt":"2026-10-10T03:53:34.399Z","patchAvailable":true,"disclosureDate":null,"fixReleasedAt":"2025-06-14T00:57:41.575Z","daysToFix":-10,"fixCheckedAt":"2026-10-29T21:44:19.512Z","capecIds":null,"crossRefCount":0,"attackSophistication":"moderate","impactType":["confidentiality","integrity"],"aiComponentTargeted":"plugin","llmSpecific":true,"classifierConfidence":0.95,"researchCategory":null,"atlasIds":null,"fixes":[{"ecosystem":"npm","name":"@anthropic-ai/claude-code","fixedVersion":"1.0.24","matchedVersion":"1.0.24","fixReleasedAt":"2025-06-14T00:57:41.575Z","daysToFix":-10,"match":"ecosystem","source":"registry","status":"found","checkedAt":"2026-10-29T21:44:19.360Z"}]}}