CVE-2026-46331

Researchers at Accomplish AI demonstrated a sandbox escape in Anthropic's Claude Cowork agent, exploiting CVE-2026-46331 to break through both isolation layers and access the host macOS filesystem. Th…

Security researchers at Accomplish AI disclosed on July 23 that a local Claude Cowork session could chain Linux CVE-2026-46331 with a read-write host mount to escape its VM and reach files available t…

Anthropic's Claude Cowork desktop app contained a sandbox escape vulnerability that allowed untrusted content inside a Linux VM to read and write files anywhere on the host Mac, including SSH keys and…