CVE-2026-34451

See a problem?
Please try reporting it to the source first.
Source
https://cve.org/CVERecord?id=CVE-2026-34451
Import Source
https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-34451.json
JSON Data
https://api.osv.dev/v1/vulns/CVE-2026-34451
Aliases
Downstream
Published
2026-03-31T21:35:21Z
Modified
2026-10-21T02:31:07Z
Severity
  • 6.3 (Medium) CVSS_V4 - CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:N/VC:L/VI:L/VA:N/SC:N/SI:N/SA:N CVSS Calculator
Summary
Claude SDK for TypeScript: Memory Tool Path Validation Allows Sandbox Escape to Sibling Directories
Details

Claude SDK for TypeScript provides access to the Claude API from server-side TypeScript or JavaScript applications. From version 0.79.0 to before version 0.81.0, the local filesystem memory tool in the Anthropic TypeScript SDK validated model-supplied paths using a string prefix check that did not append a trailing path separator. A model steered by prompt injection could supply a crafted path that resolved to a sibling directory sharing the memory root's name as a prefix, allowing reads and writes outside the sandboxed memory directory. This issue has been patched in version 0.81.0.

Database specific 
{
    "cna_assigner":  "GitHub_M",
    "cwe_ids":  [
        "CWE-22",
        "CWE-41"
    ],
    "osv_generated_from":  "https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/34xxx/CVE-2026-34451.json"
}
References

Affected packages

Git / github.com/anthropics/anthropic-sdk-typescript

Affected ranges

Type
GIT
Repo
https://github.com/anthropics/anthropic-sdk-typescript
Events
Introduced
af66c809a5b59d6dc6e02e405b2c449fd9432e5e
Fixed
bc1a2ff79ca83dfd41445ecde59d2158288a603d
Fixed
0ac69b3438ee9c96b21a7d3c39c07b7cdb6995d9
Database specific
Show details 
{
    "extracted_events":  [
        {
            "cpe":  "cpe:2.3:a:anthropic:claude_sdk_for_typescript:*:*:*:*:*:*:*:*",
            "range":  [
                {
                    "introduced":  "0.79.0"
                },
                {
                    "fixed":  "0.81.0"
                }
            ],
            "source":  "CPE_RANGE"
        },
        {
            "range":  [
                {
                    "fixed":  "0ac69b3438ee9c96b21a7d3c39c07b7cdb6995d9"
                }
            ],
            "source":  "REFERENCES_COMMIT"
        },
        {
            "original_tag":  "sdk-v0.81.0",
            "range":  [
                {
                    "fixed":  "bc1a2ff79ca83dfd41445ecde59d2158288a603d"
                }
            ],
            "source":  "REFERENCES_TAG"
        }
    ]
}

Affected versions

sdk-v0.*
sdk-v0.79.0
sdk-v0.80.0

Database specific

source 
"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-34451.json"