July 27, 2026

Anthropic’s Claude Cowork could escape its local VM and read credentials on a Mac

man in black long sleeve shirt using computer
Mohammad Rahmani / Unsplash

Security researchers at Accomplish AI demonstrated that Anthropic’s Claude Cowork could break out of its local virtual machine sandbox and read files across the underlying Mac, including SSH keys and cloud credentials. The attack, dubbed SharedRoot,...