SharedRoot: Sandbox Escape in Claude Cowork

Key Points:

• Main threat/vulnerability/incident: A sandbox escape vulnerability named SharedRoot has been identified in Claude Cowork on macOS.
• Impact assessment and affected systems: The vulnerability allows local execution mode exploitation, potentially compromising the security of the application and the underlying system.
• Recommended actions or mitigations: Users should apply patches as soon as they are available and limit the execution of untrusted code within the environment.

Technical Details: The vulnerability is tracked as CVE-2026-46331 and involves a chain of exploits that leverage weaknesses in the Linux kernel to escape sandbox restrictions.

MITRE ATT&CK Techniques: None mentioned

IOCs Mentioned: None mentioned