Anthropic · Claude-Code-Router · CVE-2025-57755
Name of the Vulnerable Software and Affected Versions:
claude-code-router versions prior to 1.0.34
Description:
claude-code-router is susceptible to a Cross-Origin Resource Sharing (CORS) misconfiguration. This allows potential exposure of user API Keys or equivalent credentials to unauthorized domains. Exploitation could lead to credential theft, account abuse, quota exhaustion, or access to sensitive data.
Recommendations:
Update to version 1.0.34 or later.