Claude Cowork can escape its sandbox, rummage through all of your files

A flaw in Anthropic's Claude Cowork lets its AI agent break out of its virtual machine and reach sensitive files across a user's Mac, exposing a serious gap in the tool's sandbox protections. One Linux bug gave Claude Cowork access to a Mac's filesystem Accomplish AI researchers said on July 23 that a locally running Cowork session could exploit a Linux kernel flaw and gain root access inside its virtual machine. Once the session had root access, the agent could reach the Mac's filesystem throug