Claude Code DNS Exfiltration (CVE-2025-55284)
Date: 2025-06
Affected: Claude Code DNS Exfiltration (CVE-2025-55284)
Attack vector: prompt-injection
Category: real-world
Severity: High
CVE: CVE-2025-55284
CWE: CWE-78
CVSS:  (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N)

Claude Code's default allowlist of "safe commands" included ping and dig, enabling data exfiltration via DNS requests without user confirmation. An attacker could hijack Claude Code via indirect prompt injection, read .env files, and exfiltrate secrets as DNS subdomains. Fixed in v1.0.4.


Mitigations:

Architectural layers (MAESTRO):