Claude Cowork escaped sandbox on Mac, gain full access to all files

Security researchers demonstrated that Anthropic's Claude Cowork could escape its macOS sandbox via an exploit dubbed ShareRoot, allowing attackers to read and write files anywhere on a Mac and access login credentials for online services. Around half a million Mac users had co-work sessions exposed, and some remain vulnerable to the exploit today.