VulnSocial

CVE-2025-57755

LOWCVSS 8.1 · HIGH

Signal is active with 1 mentions in latest observed window

Immediate actions

  • Track advisory updates for patch or workaround availability

Recommended action window: Monitor and triage in normal cycle

NVD description

claude-code-router is a powerful tool to route Claude Code requests to different models and customize any request. Due to improper Cross-Origin Resource Sharing (CORS) configuration, there is a risk that user API Keys or equivalent credentials may be exposed to untrusted domains. Attackers could exploit this misconfiguration to steal credentials, abuse accounts, exhaust quotas, or access sensitive data. The issue has been patched in v1.0.34.

Back to dashboard
0.0/ 10 priority

Sources & remediation

Other references
Weakness type (CWE)
CWE-200CWE-942

Priority

LOW

Exploitation

NONE

PoC

NONE

Patch

NONE

Momentum

NONE

Threat summary

  • 1 mentions across 1 observed day

What's happening

  • 1 total mentions across 1 day

Deep dive

Activity timeline1 mentions / 1d
00111Mentions · 2026-10-31: 110-31
Full discourse1 post
  • Just someone like you@Think_momental

    @CallMeDiegoJr 🟠 Claude Code Router (ریسک متوسط) · CVE-2025-57755: پیکربندی نادرست CORS می‌توانست منجر به افشای کلیدهای API به دامنه‌های غیرقابل‌اعتماد شود. این مشکل در نسخه v1.0.34 وصله شده است. · اقدام لازم: اگر نصب می‌کنید، حتماً نسخه‌ای بالاتر از 1.0.34 (ترجیحاً آخرین نسخه) را انتخاب کنید

    10000133
    81 followersView on X

Explore more

Back to dashboard