CVE-2025-55284

Claude Code is an agentic coding tool. Prior to version 1.0.4, it's possible to bypass the Claude Code confirmation prompts to read a file and then send file contents over the network without user confirmation due to an overly broad allowlist of safe commands. Reliably exploiting this requires th...

CVE-2025-55284

creationtimestamp| type| source ---|---|--- 2025-08-16 04:22:44+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lwijhucfdr25 2025-10-03 13:50:16+00:00| seen| https://bsky.app/profile/evanharris.bsky.social/post/3m2c7kukcvo2n...