{"@context":"https://schema.org","@type":"NewsArticle","generatedAt":"2026-07-28T06:20:51.496Z","headline":"Claude Cowork 智能体存在漏洞，可读写 Mac 任意文件","description":"Anthropic 的 Claude Cowork AI 智能体存在安全漏洞，攻击者可利用 Linux 内核漏洞从虚拟机沙箱逃逸，读写 Mac 任意位置文件并获取在线服务登录凭据。该漏洞影响约 50 万运行本地 Cowork 会话的 macOS 用户。Anthropic 未发布直接修复，后续版本默认在云端执行以绕过本地逃逸路径。","url":"https://www.aioga.com/news/cms3u41er02ehro8265yzb8y0/","mainEntityOfPage":"https://www.aioga.com/news/cms3u41er02ehro8265yzb8y0/","datePublished":"2026-07-27T22:57:17.000Z","dateModified":"2026-07-27T22:57:17.000Z","inLanguage":"zh-CN","publisher":{"@type":"NewsMediaOrganization","name":"Aioga","url":"https://www.aioga.com"},"citation":["https://www.ithome.com/0/982/277.htm","https://aihot.virxact.com/items/cms3u41er02ehro8265yzb8y0"],"canonicalUrl":"https://www.aioga.com/news/cms3u41er02ehro8265yzb8y0/","directAnswer":{"@type":"Answer","text":"Aioga 编辑摘要：Anthropic 的 Claude Cowork AI 智能体存在安全漏洞，攻击者可利用 Linux 内核漏洞从虚拟机沙箱逃逸，读写 Mac 任意位置文件并获取在线服务登录凭据。 Aioga 将其归入「行业动态」方向，重点关注它对真实使用和行业竞争的影响。","url":"https://www.aioga.com/news/cms3u41er02ehro8265yzb8y0/","dateCreated":"2026-07-27T22:57:17.000Z","author":{"@type":"Organization","@id":"https://www.aioga.com/authors/aioga-editorial/#editorial-team","name":"Aioga Editorial Team","url":"https://www.aioga.com/authors/aioga-editorial/"}},"evidence":[{"@type":"CreativeWork","name":"IT之家 source article","url":"https://www.ithome.com/0/982/277.htm","datePublished":"2026-07-27T22:57:17.000Z","provider":{"@type":"Organization","name":"IT之家","url":"https://www.ithome.com/0/982/277.htm"}},{"@type":"CreativeWork","name":"AIHot archive record","url":"https://aihot.virxact.com/items/cms3u41er02ehro8265yzb8y0","datePublished":"2026-07-27T22:57:17.000Z","provider":{"@type":"Organization","name":"AIHot","url":"https://aihot.virxact.com/items/cms3u41er02ehro8265yzb8y0"}}],"aggregationSource":"IT之家（RSS）","originalPublisher":{"name":"IT之家","url":"https://www.ithome.com/0/982/277.htm"},"article":{"id":"cms3u41er02ehro8265yzb8y0","slug":"cms3u41er02ehro8265yzb8y0","url":"https://www.aioga.com/news/cms3u41er02ehro8265yzb8y0/","title":"Claude Cowork 智能体存在漏洞，可读写 Mac 任意文件","title_en":"影响全球约 50 万 macOS 用户，Claude Cowork 智能体 AI 爆漏洞可读写任意 Mac 文件","summary":"Anthropic 的 Claude Cowork AI 智能体存在安全漏洞，攻击者可利用 Linux 内核漏洞从虚拟机沙箱逃逸，读写 Mac 任意位置文件并获取在线服务登录凭据。该漏洞影响约 50 万运行本地 Cowork 会话的 macOS 用户。Anthropic 未发布直接修复，后续版本默认在云端执行以绕过本地逃逸路径。","source":"IT之家（RSS）","sourceUrl":"https://www.ithome.com/0/982/277.htm","aiHotUrl":"https://aihot.virxact.com/items/cms3u41er02ehro8265yzb8y0","publishedAt":"2026-07-27T22:57:17.000Z","category":"行业动态","score":55,"selected":false,"articleBody":["IT之家：https://www.ithome.com/ 7 月 28 日消息，科技媒体 9to5Mac 昨日（7 月 27 日）发布博文，报道称 Anthropic 的 Claude Cowork 存在安全漏洞， 攻击者利用漏洞可以从 Linux 虚拟机沙箱逃逸，并读写 Mac 任意位置文件。","IT之家注：Claude Cowork 是 Anthropic 推出的 AI 智能体工具，在征得用户明确授权许可之后，该工具可以在 Mac 上访问本地文件和文件夹，并依据用户指令处理相关任务。","在安全防护方面，Anthropic 为此设置 2 层限制，其一是 Cowork 在虚拟机内隔离运行，其二是仅可访问用户授权的文件与文件夹。","安全研究人员发现， 开发者利用该漏洞可同时突破上述 2 层限制。 攻击者可让 Cowork 逃离其运行所在的 Linux 虚拟机沙箱，并在 Mac 任意位置读取或写入文件。漏洞还可能使攻击者获取在线服务的登录凭据。","在具体实现方面，Accomplish AI 公司指出 Cowork 隔离运行的虚拟机可以通过可写的 VirtioFS 挂载点共享宿主机文件系统。该挂载点原本只允许虚拟机内的 root 用户访问，但研究人员发现，他们可以利用 CVE-2026-46331（一个被称为“pedit COW”的 Linux 内核漏洞，其严重性评分接近 8 分，满分 10 分）从会话用户提升到虚拟机 root 用户权限。","一旦智能体程序获得虚拟机内的 root 权限，它就可以访问登录的 Mac 用户能够访问的任何资源。","在影响规模方面，Accomplish AI 在漏洞披露前已向 The Hacker News 分享了该漏洞的详细信息。该公司表示，在漏洞修复前，影响约有 50 万运行本地 Cowork 会话的 macOS 用户。","据 Hacker News 报道，Anthropic 公司将该报告标记为“信息丰富”（ informative ），但并未发布直接的解决方案。随后发布的 Claude Cowork 版本默认在云端执行，完全绕过了本地逃逸路径。","然而，选择在本地而非云端运行智能体的用户仍然面临风险，除非他们通过禁用非特权用户命名空间、限制文件系统共享以及使用严格的挂载保护来强化配置。"],"articleImages":[{"sourceUrl":"https://img.ithome.com/newsuploadfiles/2026/7/38530c35-9503-4ed5-8b7a-42a61d48eed5.png","alt":"","afterParagraph":8,"url":"/media/articles/cms3u41er02ehro8265yzb8y0/0737a58a827102c0.png"}],"mediaStatus":"ok","articleBodyZh":[],"translationStatus":"","bodyOrigin":"source-page","editorial":{"summary":"Aioga 编辑摘要：Anthropic 的 Claude Cowork AI 智能体存在安全漏洞，攻击者可利用 Linux 内核漏洞从虚拟机沙箱逃逸，读写 Mac 任意位置文件并获取在线服务登录凭据。 Aioga 将其归入「行业动态」方向，重点关注它对真实使用和行业竞争的影响。","background":"背景分析：产品与工具类动态的价值取决于它是否解决明确场景、能否进入工作流，以及交付、价格和数据安全是否可接受。","viewpoint":"Aioga 判断：这条动态更适合作为行业观察信号，当前信息足以建立线索，但不足以推导长期结论。","implications":"影响分析：对相关团队而言，短期应先核对来源、可用范围和实际成本，再判断是否值得接入或跟进。","nextStep":"后续观察：继续观察产品是否开放使用、用户反馈、定价、集成能力和后续版本更新。","evidenceRefs":["title","summary","articleBody"],"confidence":"medium","status":"published","aiGenerated":false,"autoApproved":true,"generatedBy":"rule-safe-fallback","generatedAt":"2026-07-28T06:29:10.446Z","sourceHash":"bedfdda340abdb9c","validation":{"passed":true,"mode":"rule-safe-fallback","checks":["schema","length","source-attribution","no-html"]}},"tags":["行业动态","IT之家（RSS）"],"translations":{"zh-CN":{"title":"Claude Cowork 智能体存在漏洞，可读写 Mac 任意文件","summary":"Anthropic 的 Claude Cowork AI 智能体存在安全漏洞，攻击者可利用 Linux 内核漏洞从虚拟机沙箱逃逸，读写 Mac 任意位置文件并获取在线服务登录凭据。该漏洞影响约 50 万运行本地 Cowork 会话的 macOS 用户。Anthropic 未发布直接修复，后续版本默认在云端执行以绕过本地逃逸路径。","category":"行业动态","source":"IT之家","aggregationSource":"IT之家（RSS）","pageTitle":"Claude Cowork 智能体存在漏洞，可读写 Mac 任意文件 - Aioga AI资讯","description":"Anthropic 的 Claude Cowork AI 智能体存在安全漏洞，攻击者可利用 Linux 内核漏洞从虚拟机沙箱逃逸，读写 Mac 任意位置文件并获取在线服务登录凭据。该漏洞影响约 50 万运行本地 Cowork 会话的 macOS 用户。Anthropic 未发布直接修复，后续版本默认在云端执行以绕过本地逃逸路径。","url":"https://www.aioga.com/news/cms3u41er02ehro8265yzb8y0/"},"en":{"title":"Claude Cowork intelligent agent has vulnerabilities, allowing reading and writing of any Mac files","summary":"Anthropic's Claude Cowork AI agent has a security vulnerability, where attackers can exploit a Linux kernel flaw to escape from the virtual machine sandbox, read and write files anywhere on a Mac, and obtain online service login credentials. This vulnerability affects about 500,000 macOS users running local Cowork sessions. Anthropic has not released a direct fix; subsequent versions default to execution in the cloud to bypass the local escape path.","category":"Industry","source":"IT之家（RSS）","aggregationSource":"IT之家（RSS）","pageTitle":"Claude Cowork intelligent agent has vulnerabilities, allowing reading and writing of any Mac files - Aioga AI News","description":"Anthropic's Claude Cowork AI agent has a security vulnerability, where attackers can exploit a Linux kernel flaw to escape from the virtual machine sandbox, read and write files an...","url":"https://www.aioga.com/en/news/cms3u41er02ehro8265yzb8y0/","contentTranslated":true,"sourceHash":"519da4cd174aba66","translatedAt":"2026-07-27T23:22:39.329Z"},"ja":{"title":"Claude Cowork の知能体に脆弱性があり、Mac の任意のファイルを読み書きできる","summary":"Anthropic の Claude Cowork AI エージェントにはセキュリティ脆弱性があり、攻撃者は Linux カーネルの脆弱性を利用して仮想マシンサンドボックスから脱出し、Mac の任意の場所にあるファイルを読み書きし、オンラインサービスのログイン資格情報を取得することができます。この脆弱性は、ローカルで Cowork セッションを実行している約 50 万人の macOS ユーザーに影響します。Anthropic は直接的な修正を公開しておらず、後続バージョンではデフォルトでクラウド上で実行され、ローカル脱出経路を回避するようになっています。","category":"業界動向","source":"IT之家（RSS）","aggregationSource":"IT之家（RSS）","pageTitle":"Claude Cowork の知能体に脆弱性があり、Mac の任意のファイルを読み書きできる - Aioga AIニュース","description":"Anthropic の Claude Cowork AI エージェントにはセキュリティ脆弱性があり、攻撃者は Linux カーネルの脆弱性を利用して仮想マシンサンドボックスから脱出し、Mac の任意の場所にあるファイルを読み書きし、オンラインサービスのログイン資格情報を取得することができます。この脆弱性は、ローカルで Cowork セッションを実行している約...","url":"https://www.aioga.com/ja/news/cms3u41er02ehro8265yzb8y0/","contentTranslated":true,"sourceHash":"519da4cd174aba66","translatedAt":"2026-07-27T23:22:46.158Z"},"ko":{"title":"Claude Cowork 지능형 체계에 취약점이 있어 Mac의 임의 파일을 읽고 쓸 수 있습니다","summary":"Anthropic의 Claude Cowork AI 지능체에 보안 취약점이 존재하며, 공격자는 Linux 커널 취약점을 이용해 가상 머신 샌드박스에서 탈출하여 Mac의 임의 위치에 있는 파일을 읽고 쓸 수 있으며 온라인 서비스 로그인 자격 증명을 획득할 수 있습니다. 이 취약점은 로컬 Cowork 세션을 실행하는 약 50만 명의 macOS 사용자에게 영향을 미칩니다. Anthropic은 직접적인 수정 패치를 발표하지 않았으며, 이후 버전에서는 로컬 탈출 경로를 우회하기 위해 기본적으로 클라우드에서 실행되도록 설정했습니다.","category":"업계 동향","source":"IT之家（RSS）","aggregationSource":"IT之家（RSS）","pageTitle":"Claude Cowork 지능형 체계에 취약점이 있어 Mac의 임의 파일을 읽고 쓸 수 있습니다 - Aioga AI 뉴스","description":"Anthropic의 Claude Cowork AI 지능체에 보안 취약점이 존재하며, 공격자는 Linux 커널 취약점을 이용해 가상 머신 샌드박스에서 탈출하여 Mac의 임의 위치에 있는 파일을 읽고 쓸 수 있으며 온라인 서비스 로그인 자격 증명을 획득할 수 있습니다. 이 취약점은 로컬 Cowork 세션을 실행하는 약 50만...","url":"https://www.aioga.com/ko/news/cms3u41er02ehro8265yzb8y0/","contentTranslated":true,"sourceHash":"519da4cd174aba66","translatedAt":"2026-07-27T23:23:23.673Z"},"es":{"title":"El agente inteligente Claude Cowork tiene vulnerabilidades, puede leer y escribir cualquier archivo en Mac","summary":"El agente de inteligencia artificial Claude Cowork de Anthropic tiene vulnerabilidades de seguridad; los atacantes pueden aprovechar fallas del kernel de Linux para escapar del sandbox de la máquina virtual, leer y escribir archivos en cualquier ubicación de Mac y obtener credenciales de inicio de sesión de servicios en línea. Esta vulnerabilidad afecta aproximadamente a 500,000 usuarios de macOS que ejecutan sesiones locales de Cowork. Anthropic no ha publicado una solución directa, y las versiones posteriores se ejecutan por defecto en la nube para evitar la ruta de escape local.","category":"Industria","source":"IT之家（RSS）","aggregationSource":"IT之家（RSS）","pageTitle":"El agente inteligente Claude Cowork tiene vulnerabilidades, puede leer y escribir cualquier archivo en Mac - Aioga Noticias de IA","description":"El agente de inteligencia artificial Claude Cowork de Anthropic tiene vulnerabilidades de seguridad; los atacantes pueden aprovechar fallas del kernel de Linux para escapar del san...","url":"https://www.aioga.com/es/news/cms3u41er02ehro8265yzb8y0/","contentTranslated":true,"sourceHash":"519da4cd174aba66","translatedAt":"2026-07-27T23:23:20.428Z"},"fr":{"title":"L'agent intelligent Claude Cowork présente des vulnérabilités, pouvant lire et écrire n'importe quel fichier sur Mac","summary":"L'agent intelligent Claude Cowork d'Anthropic présente une faille de sécurité, permettant aux attaquants d'exploiter une vulnérabilité du noyau Linux pour s'échapper du bac à sable de la machine virtuelle, lire et écrire des fichiers à n'importe quel endroit sur Mac et obtenir les identifiants de connexion aux services en ligne. Cette vulnérabilité affecte environ 500 000 utilisateurs macOS exécutant des sessions Cowork locales. Anthropic n'a pas publié de correctif direct, les versions ultérieures s'exécutant par défaut dans le cloud pour contourner le chemin d'évasion local.","category":"Industrie","source":"IT之家（RSS）","aggregationSource":"IT之家（RSS）","pageTitle":"L'agent intelligent Claude Cowork présente des vulnérabilités, pouvant lire et écrire n'importe quel fichier sur Mac - Aioga Actualités IA","description":"L'agent intelligent Claude Cowork d'Anthropic présente une faille de sécurité, permettant aux attaquants d'exploiter une vulnérabilité du noyau Linux pour s'échapper du bac à sable...","url":"https://www.aioga.com/fr/news/cms3u41er02ehro8265yzb8y0/","contentTranslated":true,"sourceHash":"519da4cd174aba66","translatedAt":"2026-07-27T23:24:05.627Z"},"de":{"title":"Claude Cowork Intelligenzsystem hat Sicherheitslücken, kann beliebige Dateien auf dem Mac lesen und schreiben","summary":"Anthropic's Claude Cowork AI-Agent hat Sicherheitslücken, durch die Angreifer einen Linux-Kernel-Fehler ausnutzen können, um aus der virtuellen Maschinen-Sandbox auszubrechen, beliebige Dateien auf dem Mac zu lesen und zu schreiben und Anmeldedaten für Online-Dienste zu erhalten. Diese Sicherheitslücke betrifft etwa 500.000 macOS-Nutzer, die lokale Cowork-Sitzungen ausführen. Anthropic hat keinen direkten Fix veröffentlicht; spätere Versionen werden standardmäßig in der Cloud ausgeführt, um den lokalen Ausweichpfad zu umgehen.","category":"行业动态","source":"IT之家（RSS）","aggregationSource":"IT之家（RSS）","pageTitle":"Claude Cowork Intelligenzsystem hat Sicherheitslücken, kann beliebige Dateien auf dem Mac lesen und schreiben - Aioga KI-News","description":"Anthropic's Claude Cowork AI-Agent hat Sicherheitslücken, durch die Angreifer einen Linux-Kernel-Fehler ausnutzen können, um aus der virtuellen Maschinen-Sandbox auszubrechen, beli...","url":"https://www.aioga.com/de/news/cms3u41er02ehro8265yzb8y0/","contentTranslated":true,"sourceHash":"519da4cd174aba66","translatedAt":"2026-07-27T23:24:03.256Z"},"pt-BR":{"title":"O agente inteligente Claude Cowork possui vulnerabilidades, podendo ler e escrever qualquer arquivo do Mac","summary":"O agente de IA Claude Cowork da Anthropic apresenta vulnerabilidades de segurança, que podem ser exploradas por atacantes para escapar do sandbox da máquina virtual usando falhas no kernel do Linux, ler e escrever arquivos em qualquer local do Mac e obter credenciais de login de serviços online. Esta vulnerabilidade afeta cerca de 500 mil usuários de macOS que executam sessões locais do Cowork. A Anthropic não lançou uma correção direta, e as versões subsequentes executam por padrão na nuvem para contornar o caminho de escape local.","category":"行业动态","source":"IT之家（RSS）","aggregationSource":"IT之家（RSS）","pageTitle":"O agente inteligente Claude Cowork possui vulnerabilidades, podendo ler e escrever qualquer arquivo do Mac - Aioga Notícias de IA","description":"O agente de IA Claude Cowork da Anthropic apresenta vulnerabilidades de segurança, que podem ser exploradas por atacantes para escapar do sandbox da máquina virtual usando falhas n...","url":"https://www.aioga.com/pt-BR/news/cms3u41er02ehro8265yzb8y0/","contentTranslated":true,"sourceHash":"519da4cd174aba66","translatedAt":"2026-07-27T23:24:44.175Z"},"ru":{"title":"Интеллектуальная система Claude Cowork имеет уязвимости, позволяющие читать и писать любые файлы на Mac","summary":"У интеллектуального агента Claude Cowork AI компании Anthropic обнаружена уязвимость в безопасности, злоумышленники могут использовать уязвимость ядра Linux для выхода из виртуальной песочницы, чтения и записи файлов в любом месте Mac и получения учетных данных для входа в онлайн-сервисы. Эта уязвимость затрагивает примерно 500 тысяч пользователей macOS, которые запускают локальные сеансы Cowork. Компания Anthropic не выпустила прямое исправление, в последующих версиях выполнение по умолчанию происходит в облаке, чтобы обойти локальный путь выхода.","category":"行业动态","source":"IT之家（RSS）","aggregationSource":"IT之家（RSS）","pageTitle":"Интеллектуальная система Claude Cowork имеет уязвимости, позволяющие читать и писать любые файлы на Mac - Aioga Новости ИИ","description":"У интеллектуального агента Claude Cowork AI компании Anthropic обнаружена уязвимость в безопасности, злоумышленники могут использовать уязвимость ядра Linux для выхода из виртуальн...","url":"https://www.aioga.com/ru/news/cms3u41er02ehro8265yzb8y0/","contentTranslated":true,"sourceHash":"519da4cd174aba66","translatedAt":"2026-07-27T23:24:41.866Z"},"ar":{"title":"يوجد ثغرة في كيان Claude Cowork الذكي، يمكنه قراءة وكتابة أي ملف على جهاز Mac","summary":"توجد ثغرة أمان في الذكاء الاصطناعي Claude Cowork التابع لشركة Anthropic، حيث يمكن للمهاجمين استغلال ثغرة في نواة نظام Linux للهروب من صندوق الحماية الافتراضي، وقراءة وكتابة الملفات في أي موقع على أجهزة Mac والحصول على بيانات تسجيل الدخول للخدمات عبر الإنترنت. تؤثر هذه الثغرة على نحو 500 ألف مستخدم لنظام macOS الذين يشغلون جلسات Cowork محلية. لم تصدر Anthropic إصلاحًا مباشرًا، وستنفذ الإصدارات اللاحقة افتراضيًا على السحابة لتجاوز مسار الهروب المحلي.","category":"行业动态","source":"IT之家（RSS）","aggregationSource":"IT之家（RSS）","pageTitle":"يوجد ثغرة في كيان Claude Cowork الذكي، يمكنه قراءة وكتابة أي ملف على جهاز Mac - Aioga أخبار الذكاء الاصطناعي","description":"توجد ثغرة أمان في الذكاء الاصطناعي Claude Cowork التابع لشركة Anthropic، حيث يمكن للمهاجمين استغلال ثغرة في نواة نظام Linux للهروب من صندوق الحماية الافتراضي، وقراءة وكتابة الملفات...","url":"https://www.aioga.com/ar/news/cms3u41er02ehro8265yzb8y0/","contentTranslated":true,"sourceHash":"519da4cd174aba66","translatedAt":"2026-07-27T23:25:20.488Z"},"hi":{"title":"Claude Cowork इंटेलिजेंट एजेंट में कमजोरियाँ हैं, जो Mac की किसी भी फाइल को पढ़ने और लिखने की अनुमति देती हैं","summary":"Anthropic का Claude Cowork AI एजेंट सुरक्षा कमजोरियों से ग्रस्त है, हमलावर Linux कर्नेल की खामी का फायदा उठाकर वर्चुअल मशीन सैंडबॉक्स से भाग सकते हैं, Mac पर किसी भी स्थान की फाइल पढ़ और लिख सकते हैं और ऑनलाइन सेवा लॉगिन क्रेडेंशियल प्राप्त कर सकते हैं। यह कमजोरी लगभग 500,000 macOS उपयोगकर्ताओं को प्रभावित करती है जो स्थानीय Cowork सत्र चला रहे हैं। Anthropic ने सीधे सुधार जारी नहीं किया है, अगले संस्करण में डिफ़ॉल्ट रूप से क्लाउड पर निष्पादित किया जाता है ताकि स्थानीय भागने का रास्ता टाला जा सके।","category":"行业动态","source":"IT之家（RSS）","aggregationSource":"IT之家（RSS）","pageTitle":"Claude Cowork इंटेलिजेंट एजेंट में कमजोरियाँ हैं, जो Mac की किसी भी फाइल को पढ़ने और लिखने की अनुमति देती हैं - Aioga AI समाचार","description":"Anthropic का Claude Cowork AI एजेंट सुरक्षा कमजोरियों से ग्रस्त है, हमलावर Linux कर्नेल की खामी का फायदा उठाकर वर्चुअल मशीन सैंडबॉक्स से भाग सकते हैं, Mac पर किसी भी स्थान की फाइल...","url":"https://www.aioga.com/hi/news/cms3u41er02ehro8265yzb8y0/","contentTranslated":true,"sourceHash":"519da4cd174aba66","translatedAt":"2026-07-27T23:25:30.022Z"},"it":{"title":"L'agente intelligente Claude Cowork ha una vulnerabilità che permette di leggere e scrivere qualsiasi file su Mac","summary":"L'agente AI Claude Cowork di Anthropic presenta vulnerabilità di sicurezza, gli aggressori possono sfruttare falle del kernel Linux per evadere dalla sandbox della macchina virtuale, leggere e scrivere file in posizioni arbitrarie su Mac e ottenere le credenziali di accesso ai servizi online. Questa vulnerabilità interessa circa 500.000 utenti macOS che eseguono sessioni locali di Cowork. Anthropic non ha rilasciato una correzione diretta; le versioni successive eseguono le operazioni di default sul cloud per aggirare il percorso di evasione locale.","category":"行业动态","source":"IT之家（RSS）","aggregationSource":"IT之家（RSS）","pageTitle":"L'agente intelligente Claude Cowork ha una vulnerabilità che permette di leggere e scrivere qualsiasi file su Mac - Aioga Notizie IA","description":"L'agente AI Claude Cowork di Anthropic presenta vulnerabilità di sicurezza, gli aggressori possono sfruttare falle del kernel Linux per evadere dalla sandbox della macchina virtual...","url":"https://www.aioga.com/it/news/cms3u41er02ehro8265yzb8y0/","contentTranslated":true,"sourceHash":"519da4cd174aba66","translatedAt":"2026-07-27T23:26:08.473Z"},"nl":{"title":"Claude Cowork-intelligentie heeft kwetsbaarheden, kan elk bestand op een Mac lezen en schrijven","summary":"Anthropic's Claude Cowork AI-agent heeft een beveiligingslek, waarbij aanvallers een Linux-kernel kwetsbaarheid kunnen gebruiken om uit de virtuele machine sandbox te ontsnappen, bestanden op willekeurige locaties op Mac te lezen en schrijven en inloggegevens van online services te verkrijgen. Deze kwetsbaarheid treft ongeveer 500.000 macOS-gebruikers die lokale Cowork-sessies draaien. Anthropic heeft geen directe patch uitgebracht; latere versies worden standaard in de cloud uitgevoerd om het lokale ontsnappingspad te omzeilen.","category":"行业动态","source":"IT之家（RSS）","aggregationSource":"IT之家（RSS）","pageTitle":"Claude Cowork-intelligentie heeft kwetsbaarheden, kan elk bestand op een Mac lezen en schrijven - Aioga AI-nieuws","description":"Anthropic's Claude Cowork AI-agent heeft een beveiligingslek, waarbij aanvallers een Linux-kernel kwetsbaarheid kunnen gebruiken om uit de virtuele machine sandbox te ontsnappen, b...","url":"https://www.aioga.com/nl/news/cms3u41er02ehro8265yzb8y0/","contentTranslated":true,"sourceHash":"519da4cd174aba66","translatedAt":"2026-07-27T23:26:03.338Z"},"tr":{"title":"Claude Cowork akıllı sisteminde açıklar var, Mac üzerinde herhangi bir dosyayı okuyup yazabilir","summary":"Anthropic'in Claude Cowork AI akıllı ajanında güvenlik açıkları bulunmaktadır; saldırganlar Linux çekirdek açıklarını kullanarak sanal makine sandığından kaçabilir, Mac'lerde herhangi bir dosyayı okuyup yazabilir ve çevrimiçi hizmet giriş bilgilerini ele geçirebilir. Bu açık, yaklaşık 500.000 yerel Cowork oturumu çalıştıran macOS kullanıcısını etkilemektedir. Anthropic doğrudan bir düzeltme yayınlamamış olup, sonraki sürümler varsayılan olarak yerel kaçış yolunu atlatmak için bulutta çalıştırılacak şekilde tasarlanmıştır.","category":"行业动态","source":"IT之家（RSS）","aggregationSource":"IT之家（RSS）","pageTitle":"Claude Cowork akıllı sisteminde açıklar var, Mac üzerinde herhangi bir dosyayı okuyup yazabilir - Aioga AI Haberleri","description":"Anthropic'in Claude Cowork AI akıllı ajanında güvenlik açıkları bulunmaktadır; saldırganlar Linux çekirdek açıklarını kullanarak sanal makine sandığından kaçabilir, Mac'lerde herha...","url":"https://www.aioga.com/tr/news/cms3u41er02ehro8265yzb8y0/","contentTranslated":true,"sourceHash":"519da4cd174aba66","translatedAt":"2026-07-27T23:26:49.066Z"},"vi":{"title":"Thực thể thông minh Claude Cowork tồn tại lỗ hổng, có thể đọc và ghi bất kỳ tệp Mac nào","summary":"Anthropic của Claude Cowork AI tồn tại lỗ hổng bảo mật, kẻ tấn công có thể lợi dụng lỗ hổng nhân Linux để thoát khỏi môi trường sandbox của máy ảo, đọc và ghi tệp ở bất kỳ vị trí nào trên Mac và lấy thông tin đăng nhập dịch vụ trực tuyến. Lỗ hổng này ảnh hưởng khoảng 500.000 người dùng macOS đang chạy phiên Cowork cục bộ. Anthropic chưa phát hành bản vá trực tiếp, các phiên bản sau mặc định thực hiện trên đám mây để tránh đường thoát một cách cục bộ.","category":"行业动态","source":"IT之家（RSS）","aggregationSource":"IT之家（RSS）","pageTitle":"Thực thể thông minh Claude Cowork tồn tại lỗ hổng, có thể đọc và ghi bất kỳ tệp Mac nào - Tin tức AI Aioga","description":"Anthropic của Claude Cowork AI tồn tại lỗ hổng bảo mật, kẻ tấn công có thể lợi dụng lỗ hổng nhân Linux để thoát khỏi môi trường sandbox của máy ảo, đọc và ghi tệp ở bất kỳ vị trí n...","url":"https://www.aioga.com/vi/news/cms3u41er02ehro8265yzb8y0/","contentTranslated":true,"sourceHash":"519da4cd174aba66","translatedAt":"2026-07-27T23:26:50.896Z"},"id":{"title":"Claude Cowork agen cerdas memiliki kerentanan, dapat membaca dan menulis file Mac apa pun","summary":"Claude Cowork AI dari Anthropic memiliki kerentanan keamanan, di mana penyerang dapat memanfaatkan kerentanan kernel Linux untuk keluar dari sandbox mesin virtual, membaca dan menulis file di lokasi mana pun di Mac, serta mendapatkan kredensial login layanan online. Kerentanan ini memengaruhi sekitar 500.000 pengguna macOS yang menjalankan sesi Cowork lokal. Anthropic belum merilis perbaikan langsung, dan versi selanjutnya dijalankan di cloud secara default untuk menghindari jalur eskalasi lokal.","category":"行业动态","source":"IT之家（RSS）","aggregationSource":"IT之家（RSS）","pageTitle":"Claude Cowork agen cerdas memiliki kerentanan, dapat membaca dan menulis file Mac apa pun - Berita AI Aioga","description":"Claude Cowork AI dari Anthropic memiliki kerentanan keamanan, di mana penyerang dapat memanfaatkan kerentanan kernel Linux untuk keluar dari sandbox mesin virtual, membaca dan menu...","url":"https://www.aioga.com/id/news/cms3u41er02ehro8265yzb8y0/","contentTranslated":true,"sourceHash":"519da4cd174aba66","translatedAt":"2026-07-27T23:27:24.485Z"},"th":{"title":"Claude Cowork ปัญญาประดิษฐ์มีช่องโหว่ สามารถอ่านและเขียนไฟล์ Mac ใดก็ได้","summary":"Anthropic ของ Claude Cowork AI มีช่องโหว่ด้านความปลอดภัย ผู้โจมตีสามารถใช้ช่องโหว่ของเคอร์เนล Linux เพื่อหลบหนีจาก sandbox ของเครื่องเสมือน อ่านและเขียนไฟล์ในตำแหน่งใดก็ได้ของ Mac และเข้าถึงข้อมูลประจำตัวการเข้าสู่ระบบบริการออนไลน์ ช่องโหว่นี้ส่งผลกระทบต่อผู้ใช้ macOS ประมาณ 500,000 คนที่รันเซสชัน Cowork บนเครื่องโดยตรง Anthropic ยังไม่ได้ออกการแก้ไขโดยตรง รุ่นต่อไปจะรันโดยค่าเริ่มต้นบนคลาวด์เพื่อหลีกเลี่ยงเส้นทางการหลบหนีบนเครื่อง","category":"行业动态","source":"IT之家（RSS）","aggregationSource":"IT之家（RSS）","pageTitle":"Claude Cowork ปัญญาประดิษฐ์มีช่องโหว่ สามารถอ่านและเขียนไฟล์ Mac ใดก็ได้ - ข่าว AI Aioga","description":"Anthropic ของ Claude Cowork AI มีช่องโหว่ด้านความปลอดภัย ผู้โจมตีสามารถใช้ช่องโหว่ของเคอร์เนล Linux เพื่อหลบหนีจาก sandbox ของเครื่องเสมือน อ่านและเขียนไฟล์ในตำแหน่งใดก็ได้ของ Mac...","url":"https://www.aioga.com/th/news/cms3u41er02ehro8265yzb8y0/","contentTranslated":true,"sourceHash":"519da4cd174aba66","translatedAt":"2026-07-27T23:27:36.928Z"},"pl":{"title":"Claude Cowork inteligentny agent ma luki, może odczytywać i zapisywać dowolne pliki na Macu","summary":"Agent AI Claude Cowork firmy Anthropic ma lukę bezpieczeństwa, którą atakujący może wykorzystać do ucieczki z piaskownicy maszyny wirtualnej poprzez lukę w jądrze Linux, odczytywania i zapisywania plików w dowolnej lokalizacji na Mac oraz pozyskiwania danych logowania do usług online. Luka ta dotyczy około 500 tysięcy użytkowników macOS uruchamiających lokalne sesje Cowork. Firma Anthropic nie wydała bezpośredniej poprawki; w kolejnych wersjach domyślnie wykonywane są one w chmurze, aby obejść lokalną ścieżkę ucieczki.","category":"行业动态","source":"IT之家（RSS）","aggregationSource":"IT之家（RSS）","pageTitle":"Claude Cowork inteligentny agent ma luki, może odczytywać i zapisywać dowolne pliki na Macu - Aioga Wiadomości AI","description":"Agent AI Claude Cowork firmy Anthropic ma lukę bezpieczeństwa, którą atakujący może wykorzystać do ucieczki z piaskownicy maszyny wirtualnej poprzez lukę w jądrze Linux, odczytywan...","url":"https://www.aioga.com/pl/news/cms3u41er02ehro8265yzb8y0/","contentTranslated":true,"sourceHash":"519da4cd174aba66","translatedAt":"2026-07-27T23:28:21.435Z"}}}}