IT Consultancy
IT Consultancy Get expert guidance to leverage technology for your business growth. We help you identify the right IT solutions, optimize infrastructure, and ensure your digital environment is secure,…
Claude Cowork Flaw Could Let an AI Agent Access Mac Files
Digital Marketing
Digital Marketing Grow your brand and reach the right audience with data-driven marketing strategies. We help you create campaigns that convert, manage social channels effectively, and optimize your d…
Privacy Policy
Privacy Policy At CometSoul, accessible from https://cometsoul.com, one of our main priorities is the privacy of our visitors. This Privacy Policy document contains types of information that is collec…
Terms and Conditions
Welcome to CometSoul! These terms and conditions outline the rules and regulations for the use of CometSoul’s Website, located at https://cometsoul.com. By accessing this website we assume you a…
Disclaimer
If you require any more information or have any questions about our site’s disclaimer, please feel free to contact us. Disclaimers for CometSoul All the information on this website – https…
Managed Wi-Fi Service
Managed Wi-Fi Service Build a fast, stable, and secure Wi-Fi for your business at Zero depreciation cost. Enterprise-Grade Guest Wi-Fi With $0 Upfront Hardware Costs. We provide, install, and support …
Smart Business System Integrator
Smart Business System Integrator Simplify your daily operations with smart systems that automate bookings, schedules, and routine tasks so you can focus on growing your business. We set up and integra…
IT Procurement & Hardware Managed Service
IT Procurement & Hardware Managed Service Keep your technology running smoothly from the hardware you use every day to the systems that power your business. We provide end-to-end IT management so …
AI agents are now used more often to support daily work. One example is Claude Cowork, a tool that can read files and help users complete tasks.
However, researchers found a flaw called SharedRoot. This flaw could let an AI agent escape a Linux VM and access files on the Mac host.
Why This Matters
Claude Cowork uses a VM to limit what the agent can access. In theory, the agent should only see folders shared by the user.
In the SharedRoot case, the Mac file system was shared into the VM with read and write access. If the agent becomes root inside the VM, it can read or write files on the Mac.
The impact can be serious. SSH keys, cloud tokens, work files, and sensitive settings may become exposed.
How the Flaw Works
The attack chain uses a Linux kernel flaw known as CVE-2026-46331, or pedit COW.
This flaw can let a limited user inside the VM become root. After that, the agent can access the mounted Mac file system.
In simple terms, the risk comes from two issues. The VM can be bypassed, and the shared host file system is too broad.
Who Is at Risk?
The main risk affects macOS users who run Claude Cowork locally.
Developers face higher risk because they often store Git, cloud, server, and internal tool access on their laptops.
The latest Cowork version now uses cloud execution by default. Still, users who choose local execution should be careful.
How to Reduce the Risk
Use the latest version of Claude Cowork. If available, choose cloud execution instead of local execution.
Also, do not share broad folders with an AI agent. Share only the project folder the agent really needs.
Avoid storing tokens, private keys, or sensitive files in folders the agent can read. For secrets, use a vault or secret manager.
Key Takeaway
SharedRoot shows that local AI agents need strong security boundaries. If the sandbox fails, important files on the user’s device may be exposed.
Users should update the tool, limit shared folders, and be careful when agents read files from outside sources.
source: https://thehackernews.com/2026/07/claude-cowork-flaw-could-let-ai-agent.html