https://www.accomplish.ai/blog/sharedroot-escaping-claude-cowork-sandbox/
SharedRoot; Escaping the Claude Cowork sandbox — Accomplish Blog
Untrusted content in a Claude Cowork session can escape the VM it's sandboxed in and read and write files anywhere on your Mac. The kernel bug that makes it...
claude coworkescapingsandboxaccomplishblog