Claude Cowork escaped sandbox on Mac, had full access to all files
1 directory member surfaced this signal.
“(chuclkes) I haven't seen this one before, although now I suspect some posts from yesterday might have indirectly referred to the same research... The VM of Claude Cowork, at least on Macs, are not really isolated for now. Not sure how immediately actionabl…”