CVE-2026-41686 Claude SDK for TypeScript has Insecure Default File Permissions in Local Filesystem Memory Tool

Claude SDK for TypeScript provides access to the Claude API from server-side TypeScript or JavaScript applications. From version 0.79.0 to before version 0.91.1, the BetaLocalFilesystemMemoryTool in the Anthropic TypeScript SDK created memory files and directories using the Node.js default modes...

CVE-2026-34451

CVE-2026-34451 — Claude SDK for TypeScript (Anthropic) . The local filesystem memory tool in the Anthropic TypeScript SDK (server-side) from version 0.79.0 up to before 0.81.0 validates model-supplied paths via a string prefix check that omits a trailing path separator, allowing a crafted path to...

PT-2026-29379

Claude SDK for TypeScript provides access to the Claude API from server-side TypeScript or JavaScript applications. From version 0.79.0 to before version 0.81.0, the local filesystem memory tool in the Anthropic TypeScript SDK validated model-supplied paths using a string prefix check that did no...