Claude Cowork sandbox escape allows file access on Mac

Researchers at Accomplish AI discovered a sandbox escape vulnerability in Anthropic's Claude Cowork that allows an AI agent to break out of its Linux VM and read or write files on the host Mac. The flaw affects the cowork mode where the agent can access user files. No CVE or patch details have been released yet.