Claude Cowork Flaw Could Let AI Agent Escape Its VM and Access Mac Files

Accomplish AI researchers demonstrated the escape (codenamed SharedRoot), affecting ~500,000 macOS users running local Cowork sessions. From the VM, the agent could read and write files across the Mac, including SSH keys and cloud credentials. Anthropic closed the report as 'informative' without a fix; cloud execution is now the default but local users remain exposed.

Featured · Oren Yomtov