Claude Cowork Flaw Could Let AI Agent Escape Its VM and Access Mac Files
SharedRoot exploits CVE-2026-46331 in local Claude Cowork sessions to gain guest root and read or write files across the host Mac.
More info