Claude Cowork SharedRoot Sandbox Escape Exposes Mac Files and Cloud Credentials

A newly disclosed critical sandbox escape vulnerability chain, dubbed SharedRoot, in Anthropic’s Claude Cowork for macOS allows untrusted content processed by the AI agent to break out of its isolated Linux VM and read/write files anywhere on the host Mac, including SSH keys and cloud credentials. Cowork sandboxes agent sessions inside a Linux VM using Apple’s Virtualization framework, running each session as an unprivileged user with a seccomp filter and a…