CVE-2025-55284: Claude Code Allowlist Bypass Enables Unauthorized File Read

# CVE-2025-55284: Claude Code Allowlist Bypass Enables Unauthorized File Read

https://gcdradar.vercel.app/incidents/cve-2025-55284-claude-code-allowlist-bypass-enables-unauthor · AIR-2025-0325 · closed 2025-08-16

- Lane: Patch now
- Severity: 2 (Disclosed vulnerability)
- Fix status: Fix status unknown
- First reported: 2025-08-16 (happened 2025-08-18)
- AI role: Attack on AI
- Products: Claude Code
- CVE ids: CVE-2025-55284
- CVSS: 7.1

## Summary

An overly broad command allowlist in Claude Code permitted confirmation prompt bypasses to read and exfiltrate files over the network. Users received automatic fixes via updates or forced version upgrades.

## What to do

No action recorded; read the sources below and the vendor's advisory.

## Latest updates

- 2025-08-18: CVE-2025-55284: Claude Code's Permissive Default Allowlist Enables Unauthorized File Read and Network Exfiltration in Claude Code (https://github.com/advisories/GHSA-x5gv-jw7f-j6xj)
- 2025-08-16: CVE-2025-55284: Claude Code is an agentic coding tool. (https://nvd.nist.gov/vuln/detail/CVE-2025-55284)

## Sources

- 2025-08-16 NVD: CVE-2025-55284: Claude Code is an agentic coding tool. https://nvd.nist.gov/vuln/detail/CVE-2025-55284
- 2025-08-18 GitHub Advisory Database: CVE-2025-55284: Claude Code's Permissive Default Allowlist Enables Unauthorized File Read and Network Exfiltration in Claude Code https://github.com/advisories/GHSA-x5gv-jw7f-j6xj

Verify against the vendor's advisory before changing production. Data CC BY-SA 4.0, https://gcdradar.vercel.app.