{"answers":{"affected":"2 open source packages ship an affected version, including @anthropic-ai/claude-code.","exploited":"It is not confirmed as exploited in the wild, but public exploit code for CVE-2025-52882 exists.","fix":"Upgrade @anthropic-ai/claude-code to 1.0.24 or later.","what":"CVE-2025-52882 is a high-severity missing authorization vulnerability in anthropics claude-code, published on 24 Jun 2025. An attacker can exploit it over the internet without logging in, and only if a user opens a file or follows a link."},"fix_prompt":"Check this codebase for CVE-2025-52882 and fix it if it is affected.\n\nWhat it is: CVE-2025-52882 is a high-severity missing authorization vulnerability in anthropics claude-code, published on 24 Jun 2025. An attacker can exploit it over the internet without logging in, and only if a user opens a file or follows a link.\nExploitation: It is not confirmed as exploited in the wild, but public exploit code for CVE-2025-52882 exists.\n\nAffected packages and fixed versions:\n- @anthropic-ai/claude-code (npm): affected from 0.2.116; fixed in 1.0.24\n- @anthropic-ai/claude-code (npm): affected from 0.2.116; fixed in 1.0.24\n\nTask:\n1. Search the dependency manifests and lockfiles (for example package.json, package-lock.json, requirements.txt, poetry.lock, uv.lock, pom.xml, build.gradle, go.mod, Cargo.lock, Gemfile.lock) and any Dockerfiles for the affected packages, including transitive dependencies.\n2. If an affected version is in use, upgrade it to the fixed version for its release line with the project's package manager, so the lockfile is regenerated. Prefer the smallest upgrade that fixes it.\n3. If there is no fix, or the upgrade would break the build, do not guess: explain the risk and the safest workaround instead.\n4. Run the tests and summarise what changed and why.\n5. If nothing in the project is affected, say so and change nothing.\n\nReference: https://insights.sbomify.com/CVE-2025-52882/ (Markdown: https://insights.sbomify.com/CVE-2025-52882/index.md)","id":"CVE-2025-52882","markdown":"https://insights.sbomify.com/CVE-2025-52882/index.md","name":"CVE-2025-52882","record":{"aliases":["GHSA-9f65-56v6-gxw7"],"analysis":{"component_type":"developer_tool","fix_type":"upgrade","impacts":["data_read","code_execution"],"network_reachable":"yes","non_default_config":false,"product_category":"Claude Code IDE extension","requires_auth":"none","summary":"Attackers can connect to the IDE extension via websockets to read files, view open documents, or execute code in specific scenarios.","user_interaction":"required","vuln_class":"missing_authorization"},"analysis_generated_by":"qwen3.8-flash-next","assigner":"GitHub_M","cpe":[],"cvss":{"score":8.8,"severity":"high","source":"cna","vector":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:P/VC:H/VI:H/VA:N/SC:H/SI:H/SA:N","version":"4.0"},"cwes":[{"id":"CWE-1385","name":"Missing Origin Validation in WebSockets"}],"description":"Claude Code is an agentic coding tool. Claude Code extensions in VSCode and forks (e.g., Cursor, Windsurf, and VSCodium) and JetBrains IDEs (e.g., IntelliJ, Pycharm, and Android Studio) are vulnerable to unauthorized websocket connections from an attacker when visiting attacker-controlled webpages. Claude Code for VSCode IDE extensions versions 0.2.116 through 1.0.23 are vulnerable. For Jetbrains IDE plugins, Claude Code [beta] versions 0.1.1 through 0.1.8 are vulnerable. In VSCode (and forks), exploitation would allow an attacker to read arbitrary files, see the list of files open in the IDE, get selection and diagnostics events from the IDE, or execute code in limited situations where a user has an open Jupyter Notebook and accepts a malicious prompt. In JetBrains IDEs, an attacker could get selection events, a list of open files, and a list of syntax errors. Claude released a patch for this issue on June 13th, 2025. Although Claude Code auto-updates when a user launch it and auto-updates the extensions, users should take the following steps, though the exact steps depend on one's integrated development environment (IDE). For VSCode, Cursor, Windsurf, VSCodium, and other VSCode forks, check the extension Claude Code for VSCode. Open the list of Extensions (View-\u003eExtensions), look for Claude Code for VSCode among installed extensions, update or uninstall any version prior to 1.0.24, and restart the IDE. For JetBrains IDEs including IntelliJ, PyCharm, and Android Studio, check the plugin Claude Code [Beta]. Open the Plugins list, look for Claude Code [Beta] among installed extensions, update or uninstall any version prior to 0.1.9, and restart the IDE.","ecosystems":["npm"],"exploits":{"exploitdb":0,"first_seen":null,"github_poc":0,"max_poc_stars":null,"metasploit":0,"nuclei":0,"refs":[],"tier":"weaponised"},"has_fix":true,"headline":"Claude Code IDE extensions allow websocket connections from arbitrary origins","id":"CVE-2025-52882","indexable":true,"kev":null,"kind":"cve","links":{"ecosystem":"npm","product":null,"products":[],"type":"missing_authorization","year":"2025"},"n_packages":2,"n_references":1,"next":{"headline":"Meshtastic-Android vulnerable to forged DMs with no PKC showing up as encrypted","id":"CVE-2025-52883"},"packages":[{"ecosystem":"npm","fixed":["1.0.24"],"introduced":["0.2.116"],"last_affected":[],"package":"@anthropic-ai/claude-code","purl":null,"source":"GHSA-9f65-56v6-gxw7"},{"ecosystem":"npm","fixed":["1.0.24"],"introduced":["0.2.116"],"last_affected":[],"package":"@anthropic-ai/claude-code","purl":"pkg:npm/%40anthropic-ai/claude-code","source":"GHSA-9f65-56v6-gxw7"}],"prev":{"headline":"runc: LSM labels can be bypassed with malicious config using dummy procfs files","id":"CVE-2025-52881"},"products":["claude-code"],"published":"2025-06-24","related":[],"sources":[{"class":"attribution","licence":"CVE Terms of Use (MITRE)","name":"CVE List","prefix":"CVE"},{"class":"attribution","licence":"CC BY 4.0","name":"GitHub Advisory Database","prefix":"GHSA"},{"class":"attribution","licence":"CWE Terms of Use","name":"CWE (MITRE)"},{"class":"attribution","licence":"FIRST CVSS licence","name":"CVSS (FIRST)"}],"ssvc":{"automatable":"no","exploitation":"poc","technical_impact":"partial"},"state":"PUBLISHED","updated":"2025-06-24","vendors":["anthropics"]},"summary":"Attackers can connect to the IDE extension via websockets to read files, view open documents, or execute code in specific scenarios.","url":"https://insights.sbomify.com/CVE-2025-52882/"}