2025-08 · 2025-Q3
Claude Code WebSocket Auth Bypass
Which agent, run, or tenant is this?
- Fixable
- Vendor patch
- Vendor response
- Patched
- In the wild
- No
- Actor
- Attacker
Target
Claude Code extensions
Impact
Malicious websites could read local files and execute code in Jupyter notebooks via unauthenticated local WebSocket
Root cause
Unauthenticated local WebSocket servers exposed to browser contexts
CVE
Sources
Catalog
Cite this: AgentProv incident record: Claude Code WebSocket Auth Bypass (2025-08). https://agentprov.com/incidents/2025-08-claude-code-websocket-auth-bypass
Related
- Also L6 · 2026-10-27MCP Server and LangGraph Advisory Batch: AWS API MCP Accepts Other Apps' Tokens, GitLab MCP Sends Credentials to a Repo-Chosen Registry, and Cross-Tenant Store Reads (CVE-2026-115413, CVE-2026-115883)L6Identity / Run
- Also L6 · 2026-10-23OpenAI Moves Frontier Training Offline After Red-Team Agents Escaped VMs and Signaled Through the CPU Cache; Their Brotli RCE Lands in CISA KEV (CVE-2026-111497)L6Identity / Run
- Also L6 · 2026-10-21Symantec: "Skynet Mode" Attack Agent Hijacks Exposed LLM Endpoints to Hack and Mine at the Model Owner's ExpenseL6Identity / Run