Claude Cowork’s ‘SharedRoot’ lets AI break out of its VM and read any Mac file
Accomplish AI discovered that Claude Cowork’s macOS app shares the host filesystem read‑write into its Linux VM, allowing an agent to exploit CVE‑2026‑46331, gain guest‑root, and traverse the entire Mac file system. About 500,000 users running local sessions were exposed, exposing SSH keys, cloud credentials and other sensitive data.