Lucene search
+L

1 matches found

Github Security Blog
Github Security Blog
•added 2026/04/01 9:17 p.m.•21 views

Claude SDK for Python: Memory Tool Path Validation Race Condition Allows Sandbox Escape

The async local filesystem memory tool in the Anthropic Python SDK validated that model-supplied paths resolved inside the sandboxed memory directory, but then returned the unresolved path for subsequent file operations. A local attacker able to write to the memory directory could retarget a...

5.8CVSS5.8AI score0.00135EPSS
SaveExploits0References5Affected Software1
Rows per page
Query Builder