File Reading Vulnerability in Claude Code by Anthropic
CVE-2025-55284

7.1HIGH

Key Information:

Vendor

Anthropics

Status
Claude-code
Vendor
CVE Published:
16 August 2025

What is CVE-2025-55284?

Claude Code, an agentic coding tool by Anthropic, had a vulnerability that allowed malicious entities to bypass confirmation prompts and access file contents via an overly broad allowlist of commands. This weakness requires attackers to inject untrusted content into the Claude Code context window. The issue was resolved in version 1.0.4, and users of the tool are recommended to ensure they are updated to prevent potential exploitation.

Affected Version(s)

claude-code < 1.0.4

References

https://github.com/anthropics/claude-code/security/adviso...
x_refsource_CONFIRM

CVSS V4

Score:
7.1
Severity:
HIGH
Confidentiality:
High
Integrity:
None
Availability:
None
Attack Vector:
Network
Attack Complexity:
Low
Attack Required:
None
Privileges Required:
Undefined
User Interaction:
Unknown

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.
CVE-2025-55284 : File Reading Vulnerability in Claude Code by Anthropic