CVE-2026-34451

See a problem?
Please try reporting it to the source first.
Source
https://cve.org/CVERecord?id=CVE-2026-34451
Import Source
https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-34451.json
JSON Data
https://api.osv.dev/v1/vulns/CVE-2026-34451
Aliases
Downstream
Published
2026-03-31T21:35:21.018Z
Modified
2026-04-02T13:30:46.273407Z
Severity
  • 6.3 (Medium) CVSS_V4 - CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:N/VC:L/VI:L/VA:N/SC:N/SI:N/SA:N CVSS Calculator
Summary
Claude SDK for TypeScript: Memory Tool Path Validation Allows Sandbox Escape to Sibling Directories
Details

Claude SDK for TypeScript provides access to the Claude API from server-side TypeScript or JavaScript applications. From version 0.79.0 to before version 0.81.0, the local filesystem memory tool in the Anthropic TypeScript SDK validated model-supplied paths using a string prefix check that did not append a trailing path separator. A model steered by prompt injection could supply a crafted path that resolved to a sibling directory sharing the memory root's name as a prefix, allowing reads and writes outside the sandboxed memory directory. This issue has been patched in version 0.81.0.

Database specific 
{
    "cwe_ids": [
        "CWE-22",
        "CWE-41"
    ],
    "cna_assigner": "GitHub_M",
    "osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/34xxx/CVE-2026-34451.json"
}
References

Affected packages

Git / github.com/anthropics/anthropic-sdk-typescript

Affected ranges

Type
GIT
Repo
https://github.com/anthropics/anthropic-sdk-typescript
Events
Introduced
af66c809a5b59d6dc6e02e405b2c449fd9432e5e
Fixed
bc1a2ff79ca83dfd41445ecde59d2158288a603d
Database specific 
{
    "versions": [
        {
            "introduced": "0.79.0"
        },
        {
            "fixed": "0.81.0"
        }
    ]
}

Affected versions

sdk-v0.*
sdk-v0.79.0
sdk-v0.80.0

Database specific

source 
"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-34451.json"