Claude Cowork Flaw Could Let AI Agent Escape Its VM and Access Mac Files
A newly reported flaw in Anthropic’s Claude Cowork on Mac computers could allow the AI tool to break out of its protected workspace and access files elsewhere on the device. This means people using the app may face a risk that personal or work files could be viewed or changed without their knowledge.
Who is at risk
Mac users running Claude Cowork, especially those using it for work or storing sensitive files on the same computer, are most at risk.
What to watch for
Watch for unexpected file changes, new or missing documents, unusual app behavior, or Claude requesting access beyond what seems necessary.
What to do
Update Claude Cowork and your Mac immediately if fixes are available, and avoid using the tool with sensitive files until the issue is fully patched.