{"data":{"id":"38c26201-9d50-474e-a41a-1d9d631f1f32","title":"CVE-2025-55284: Claude Code is an agentic coding tool. Prior to version 1.0.4, it's possible to bypass the Claude Code confirmation…","summary":"Claude Code versions prior to 1.0.4 contain an overly broad allowlist of safe commands. This lets an attacker bypass confirmation prompts to read a file and send its contents over the network without user approval. Reliable exploitation requires the ability to insert untrusted content into a Claude Code context window.","solution":"Fixed in version 1.0.4. Users on standard auto-update received the fix automatically after release. Versions prior to 1.0.24 are deprecated and have been forced to update, so current users are unaffected.","labels":["security"],"sourceUrl":"https://nvd.nist.gov/vuln/detail/CVE-2025-55284","publishedAt":"2025-08-16T02:15:24.637Z","cveId":"CVE-2025-55284","cweIds":["CWE-78"],"cvssScore":"7.5","cvssSeverity":"high","severity":"high","attackType":["prompt_injection"],"issueType":"vulnerability","affectedPackages":["@anthropic-ai/claude-code@< 1.0.4 (fixed: 1.0.4)"],"affectedPackageNames":["@anthropic-ai/claude-code"],"affectedPackageRefs":["npm:@anthropic-ai/claude-code"],"affectedVendors":["Anthropic"],"affectedVendorsRaw":["Claude Code"],"classifierModel":"claude-haiku-5-5","classifierPromptVersion":"v4","summaryPromptVersion":"v2","headline":"Claude Code confirmation prompt bypass allows network file exfiltration","headlinePromptVersion":"h1","cvssVector":null,"attackVector":null,"attackComplexity":null,"privilegesRequired":null,"userInteraction":null,"exploitMaturity":"unknown","epssScore":0.00596,"epssCheckedAt":"2026-11-04T06:10:13.969Z","kevDateAdded":null,"advisoryAliases":["GHSA-x5gv-jw7f-j6xj"],"affectedPackagesSource":"ghsa","affectedPackagesCheckedAt":"2026-10-10T03:52:55.643Z","patchAvailable":true,"disclosureDate":null,"fixReleasedAt":"2025-05-28T17:42:44.392Z","daysToFix":-80,"fixCheckedAt":"2026-10-29T21:43:55.801Z","capecIds":["CAPEC-88"],"crossRefCount":0,"attackSophistication":"moderate","impactType":["confidentiality"],"aiComponentTargeted":"agent","llmSpecific":true,"classifierConfidence":0.95,"researchCategory":null,"atlasIds":["AML.T0051"],"fixes":[{"ecosystem":"npm","name":"@anthropic-ai/claude-code","fixedVersion":"1.0.4","matchedVersion":"1.0.4","fixReleasedAt":"2025-05-28T17:42:44.392Z","daysToFix":-80,"match":"ecosystem","source":"registry","status":"found","checkedAt":"2026-10-29T21:43:55.647Z"}]}}