A newly disclosed critical sandbox escape vulnerability chain, dubbed SharedRoot, in Anthropic’s Claude Cowork for macOS allows untrusted content processed by the AI agent to break out of its isolated Linux VM and read/write files anywhere on the host Mac, including SSH keys and cloud credentials. Cowork sandboxes agent sessions inside a Linux VM using Apple’s […]
The post Claude Cowork SharedRoot Sandbox Escape Exposes Mac Files and Cloud Credentials appeared first on Cyber Security News.