src_c25d91fa3ad9ae9ac7
- Source-provided label
- Not reported
- Evidence class
- mentioned in report
- Confidence
- Not reported
- Observed
- Aug 11, 2025 11:20 UTC
- Retrieved
- Oct 08, 2026 03:44 UTC
Claude Code: Data Exfiltration with DNS (CVE-2025-55284)
Today we cover Claude Code and a high severity vulnerability that Anthropic fixed in early June. The vulnerability allowed an attacker to hijack Claude Code via indirect prompt injection and leak sensitive information from the developer’s machine, e.g. API keys, to external servers by issuing DNS requests. Prompt Injection Hijacks Claude When reviewing or interacting with untrusted code or process
Reference details
- Source category
- Research & news
- Report title
Claude Code: Data Exfiltration with DNS (CVE-2025-55284)- First reported
- Aug 11, 2025 11:20 UTC
- Last reported
- Aug 11, 2025 11:20 UTC
- Catalog updated
- Oct 08, 2026 03:44 UTC
- Record ID
d94cd2bf57e186ccb1a5a90d4e04b4a3e6326120b65a4b194543f4e358160094
CVEs mentioned by sources
Published indicators
Network indicators are visibly defanged. This page does not make them clickable or send them to another service.
No validated file hashes or network indicators are stored for this record.
Source observations
This record contains metadata and attribution only. It does not host, download, unpack, render, or execute malware samples.
Feed collection status
Sources represented on this page. Publication and observation dates describe the content; successful batch dates describe local collection. A recent batch does not certify complete coverage or current provider availability.
1 sources: 0 stale, 0 needing attention, 0 paused, 1 unverified.
Review source update dates and status
- src_c25d91fa3ad9ae9ac7Collection status unverifiedLast successful batch: Unverified
Stale means older than twice the recorded collection interval, with a minimum of one hour; without an interval, the threshold is 24 hours. Cached content remains available while a feed is stale, paused, or unverified.