{
 "id": "AIR-2025-0298",
 "slug": "cve-2025-52882-claude-code-improper-authorization-via-websoc",
 "title": "CVE-2025-52882: Claude Code improper authorization via websocket connections",
 "summary": "Claude Code extensions for IDEs suffer from an improper authorization vulnerability in websocket connections from arbitrary origins. An attacker can exploit this to read arbitrary files and inspect IDE state.",
 "type": "attack_on_ai",
 "categories": [
  "infra_vuln",
  "agent_hijack"
 ],
 "severity": 2,
 "targets": [
  "Anthropic",
  "framework_or_tooling"
 ],
 "products": [
  "Claude Code"
 ],
 "incident_date": "2025-06-23",
 "incident_date_precision": "day",
 "first_reported": "2025-06-23",
 "sources": [
  {
   "url": "https://github.com/advisories/GHSA-9f65-56v6-gxw7",
   "publisher": "GitHub Advisory Database",
   "title": "CVE-2025-52882: Claude Code Improper Authorization via websocket connections from arbitrary origins",
   "published_at": "2025-06-23"
  },
  {
   "url": "https://nvd.nist.gov/vuln/detail/CVE-2025-52882",
   "publisher": "NVD",
   "title": "CVE-2025-52882: Claude Code is an agentic coding tool.",
   "published_at": "2025-06-24"
  }
 ],
 "source_count": 2,
 "confidence": 0.95,
 "status": "published",
 "origin": "seed_ghsa",
 "tags": [
  "CVE-2025-52882",
  "websocket",
  "authorization"
 ],
 "created_at": "2026-10-18T07:00:14.101Z",
 "updated_at": "2026-10-18T10:04:21.885Z"
}