2025-08 · 2025-Q3
Claude Code WebSocket Auth Bypass
Layer tags: not yet tagged.
Target
Claude Code extensions
Impact
Malicious websites could read local files and execute code in Jupyter notebooks via unauthenticated local WebSocket
Root Cause
Unauthenticated local WebSocket servers exposed to browser contexts