Researcher Finds Sandbox-Escape Flaw in Anthropic's Claude Cowork
A security researcher demonstrated a sandbox-escape chain, dubbed SharedRoot, that let Claude Cowork's AI agent read and write files anywhere on a host Mac from a single message.
Read more →