Improper CORS Configuration Vulnerability in Claude Code Router by Musistudio

CVE-2025-57755

What is CVE-2025-57755?

The Claude Code Router tool allows customization and management of API requests. However, it suffers from a misconfigured Cross-Origin Resource Sharing (CORS) policy, potentially exposing user API keys and credentials to malicious domains. This misconfiguration can lead to unauthorized credential theft, account exploitation, and access to sensitive user data. A patch addressing this vulnerability has been released in version 1.0.34, urging users to update promptly to mitigate these risks.

References