2 matches found
CVE-2026-7574: Missing Support for Integrity Check
Anthropic Claude Desktop Cowork VM image handling confirmed across v1.1348.0 through v1.2278.0, including v1.1348.0, v1.1617.0, and v1.2278.0 validates only file presence and a version marker string before booting rootfs.img, but does not verify image content integrity at time-of-use. A local...
8.7CVSS6.3AI score0.00115EPSS
SaveExploits1References2
CVE-2026-7574 Anthropic Claude Desktop Cowork VM Image Contents Not Validated Before Use
Anthropic Claude Desktop Cowork VM image handling confirmed across v1.1348.0 through v1.2278.0, including v1.1348.0, v1.1617.0, and v1.2278.0 validates only file presence and a version marker string before booting rootfs.img, but does not verify image content integrity at time-of-use. A local...
8.7CVSS6.3AI score0.00115EPSS
SaveExploits1References2
20