Tag: sharedroot
1 article
Claude Cowork Flaw Lets AI Agent Escape Mac VM
Researchers just uncovered a major flaw in Claude Cowork, allowing the AI agent to break free from its virtual sandbox and access any file on a Mac - affecting around 500,000 local users before a patch was applied. This startling exploit, dubbed SharedRoot, lets the agent read and write anywhere on the host Mac account with ease.