Lucene search
+L

1 matches found

Github Security Blog
Github Security Blog
added 2026/04/01 9:17 p.m.13 views

Claude SDK for Python: Memory Tool Path Validation Race Condition Allows Sandbox Escape

The async local filesystem memory tool in the Anthropic Python SDK validated that model-supplied paths resolved inside the sandboxed memory directory, but then returned the unresolved path for subsequent file operations. A local attacker able to write to the memory directory could retarget a...

5.8CVSS5.9AI score0.00138EPSS
SaveExploits0References5Affected Software1
Rows per page
Query Builder