CVE-2025-52882

Claude Code is an agentic coding tool. Claude Code extensions in VSCode and forks (e.g., Cursor, Windsurf, and VSCodium) and JetBrains IDEs (e.g., IntelliJ, Pycharm, and Android Studio) are vulnerable to unauthorized websocket connections from an attacker when visiting attacker-controlled webpages. Claude Code for VSCode IDE extensions versions 0.2.116 through 1.0.23 are vulnerable. For Jetbrains IDE plugins, Claude Code [beta] versions 0.1.1 through 0.1.8 are vulnerable. In VSCode (and forks), exploitation would allow an attacker to read arbitrary files, see the list of files open in the IDE, get selection and diagnostics events from the IDE, or execute code in limited situations where a user has an open Jupyter Notebook and accepts a malicious prompt. In JetBrains IDEs, an attacker could get selection events, a list of open files, and a list of syntax errors. Claude released a patch for this issue on June 13th, 2025. Although Claude Code auto-updates when a user launch it and auto-updates the extensions, users should take the following steps, though the exact steps depend on one's integrated development environment (IDE). For VSCode, Cursor, Windsurf, VSCodium, and other VSCode forks, check the extension Claude Code for VSCode. Open the list of Extensions (View->Extensions), look for Claude Code for VSCode among installed extensions, update or uninstall any version prior to 1.0.24, and restart the IDE. For JetBrains IDEs including IntelliJ, PyCharm, and Android Studio, check the plugin Claude Code [Beta]. Open the Plugins list, look for Claude Code [Beta] among installed extensions, update or uninstall any version prior to 0.1.9, and restart the IDE.

• CWE-1385

• https://github.com/anthropics/claude-code/security/advisories/GHSA-9f65-56v6-gxw7

Published

Jun 24, 2025

Last Modified

Jun 17, 2026

Status

Deferred

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2025-52877In JetBrains TeamCity before 2025.03.3 reflected XSS on disk…4.8
• CVE-2025-52878In JetBrains TeamCity before 2025.03.3 usernames were expose…4.3
• CVE-2025-52879In JetBrains TeamCity before 2025.03.3 reflected XSS in the …4.8
• CVE-2025-5288The REST API | Custom API Generator For Cross Platform And I…9.8
• CVE-2025-52880Komga is a media server for comics, mangas, BDs, magazines a…4.2
• CVE-2025-52881runc is a CLI tool for spawning and running containers accor…7.5
• CVE-2025-52883Meshtastic-Android is an Android application for the mesh ra…5.3
• CVE-2025-52884RISC Zero is a zero-knowledge verifiable general computing p…1.7
• CVE-2025-52885Poppler ia a library for rendering PDF files, and examining …6.1
• CVE-2025-52886Poppler is a PDF rendering library. Versions prior to 25.06.…5.9
• CVE-2025-52887cpp-httplib is a C++11 single-file header-only cross platfor…7.5
• CVE-2025-52888Allure 2 is the version 2.x branch of Allure Report, a multi…7.5