CVE-2026-34452

See a problem?
Please try reporting it to the source first.
Source
https://cve.org/CVERecord?id=CVE-2026-34452
Import Source
https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-34452.json
JSON Data
https://api.osv.dev/v1/vulns/CVE-2026-34452
Aliases
Related
Published
2026-03-31T21:32:37.537Z
Modified
2026-04-17T06:29:14.205013456Z
Severity
  • 5.8 (Medium) CVSS_V4 - CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:H/VI:L/VA:N/SC:N/SI:N/SA:N CVSS Calculator
Summary
Claude SDK for Python: Memory Tool Path Validation Race Condition Allows Sandbox Escape
Details

The Claude SDK for Python provides access to the Claude API from Python applications. From version 0.86.0 to before version 0.87.0, the async local filesystem memory tool in the Anthropic Python SDK validated that model-supplied paths resolved inside the sandboxed memory directory, but then returned the unresolved path for subsequent file operations. A local attacker able to write to the memory directory could retarget a symlink between validation and use, causing reads or writes to escape the sandbox. The synchronous memory tool implementation was not affected. This issue has been patched in version 0.87.0.

Database specific 
{
    "cwe_ids": [
        "CWE-367",
        "CWE-59"
    ],
    "osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/34xxx/CVE-2026-34452.json",
    "cna_assigner": "GitHub_M"
}
References

Affected packages

Git / github.com/anthropics/anthropic-sdk-python

Affected ranges

Type
GIT
Repo
https://github.com/anthropics/anthropic-sdk-python
Events
Introduced
d7c0974ce6ab94ca135b10b2a45308203c0e0c7e
Fixed
ab0c4460a170183ff036e2a3dad320ac4ac2c76d
Database specific 
{
    "versions": [
        {
            "introduced": "0.86.0"
        },
        {
            "fixed": "0.87.0"
        }
    ]
}

Affected versions

v0.*
v0.86.0

Database specific

source 
"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-34452.json"