Tag: claude-cowork
All the articles with the tag "claude-cowork".
-
Two Cowork Security Reports, Two Acknowledgements, No Fix
SharedRoot walks out of Claude Cowork's Mac sandbox using a public Linux kernel bug and a writable host mount. Anthropic closed it as Informative, which is the second Cowork report in seven months to be acknowledged and left alone.
-
Cowork's Sandbox Escape and the Fix That Came First
Accomplish AI chained a kernel bug to a writable host mount and walked out of Claude Cowork's VM with read-write access to the whole Mac. Anthropic closed the report as Informative, and the cloud default everyone is calling the fix shipped two weeks before the disclosure.