Researchers show Anthropic's Claude Cowork can escape sandbox, access Mac files

Security researchers demonstrated that Anthropic's Claude Cowork agent can break out of its restricted environment and access arbitrary files on a Mac. The attack exploits the model's ability to execute shell commands and read system files. Anthropic has partially mitigated the issue, but users can take additional steps to protect themselves.