Claude Cowork Sandbox Escape on Mac Grants Full File Access

Security researchers have demonstrated an exploit called ShareRoot that allows Claude Cowork, an AI assistant application, to escape its sandbox on Mac systems, gaining full access to all files. The vulnerability was discovered by researchers who showed that the sandbox intended to restrict the AI's access could be bypassed, potentially enabling an attacker to read and write arbitrary files. The exploit targets a flaw in how the application handles file system permissions. No official statement from the developer has been released yet. This raises significant concerns about data security and privacy for users of the AI tool.

Global Impact

This vulnerability has immediate implications for user privacy and data security, particularly for individuals and organizations relying on Claude Cowork for sensitive work. The exploit could lead to data breaches, intellectual property theft, or unauthorized surveillance.