Claude Code Data Exfiltration via DNS (CVE-2025-55284)
Date: 2025-08
Affected: Anthropic Claude Code
Attack vector: data-exfiltration
Category: research
Severity: Critical

Prompt injection causes Claude Code to leak secrets via DNS queries. Disclosed during Month of AI Bugs August 2025. Fixed by Anthropic.


Mitigations:

Architectural layers (MAESTRO):