WeSearch

It's not just OpenAI models escaping and running riot — experts show how Claude Cowork can break its bonds and access Mac files

https://www.techradar.com/author/sead-fadilpai· ·9 min read · 0 reactions · 0 comments · 8 views
#just#openai#models#escaping#running
 It's not just OpenAI models escaping and running riot — experts show how Claude Cowork can break its bonds and access Mac files
TL;DR · WeSearch summary

Pro Security It's not just OpenAI models escaping and running riot — experts show how Claude Cowork can break its bonds and access Mac files News By Sead Fadilpašić Published 26 July 2026 Anthropic partially mitigated the issue When you purchase through links on our site, we may earn an affiliate commission. To break out of the sandbox, the agent exploited CVE-2026-46331 ("pedit COW"), a Linux kernel privilege-escalation vulnerability. This flaw, fixed in mid-June this year, was given a severity score of 7.8/10 (high).Accomplish AI disclosed these findings with Anthropic, which allegedly acknowledged them but did not issue a direct fix.

Key facts
About this source

TechRadar publishes from United Kingdom and files mainly under tech. We currently carry 1,191 of its stories.

Original article
TechRadar · https://www.techradar.com/author/sead-fadilpai
Read full at TechRadar →
Opening excerpt (first ~120 words) tap to expand

Pro Security It's not just OpenAI models escaping and running riot — experts show how Claude Cowork can break its bonds and access Mac files News By Sead Fadilpašić Published 26 July 2026 Anthropic partially mitigated the issue When you purchase through links on our site, we may earn an affiliate commission. Here’s how it works. (Image credit: Shutterstock/ gguy) Copy link Facebook X Whatsapp Reddit Pinterest Flipboard Threads Email Share this article 0 Join the conversation Follow us Add us as a preferred source on Google Newsletter Subscribe to our newsletter Accomplish AI showed Claude Cowork could escape a VM sandbox via Linux zero‑day CVE‑2026‑46331Agent accessed host Mac files, risking exfiltration of SSH keys, cloud credentials, and moreAnthropic shifted Cowork to default cloud…

Excerpt limited to ~120 words for fair-use compliance. The full article is at TechRadar.

Anonymous · no account needed
Share 𝕏 Facebook Reddit LinkedIn Threads WhatsApp Bluesky Mastodon Email

Discussion

0 comments

More from TechRadar