HighVulnerabilityLLM-specific
CVE-2026-7574: Anthropic Claude Desktop Cowork VM image handling trusts unverified rootfs image
- Source
- NVD(opens in a new tab)
- Identifier
- CVE-2026-7574
- Published
- Record updated
- Known exploitation
- Not listed in the CISA Known Exploited Vulnerabilities catalog at the last check.
- EPSS
- 0.1%
Summary
Anthropic Claude Desktop's Cowork VM image handling, confirmed across v1.1348.0 through v1.2278.0, checks only file presence and a version marker string before booting rootfs.img, without verifying image content integrity at time of use. A local attacker with unprivileged code execution as the victim macOS user can modify the VM root filesystem image, which is then trusted on later Cowork VM boots. This enables persistent arbitrary code execution in the VM and access to host-mounted directories. The estimated CWE mapping is CWE-353 (Missing Support for Integrity Check).
Mitigation
The source does not state a fix yet. Check the original advisory for updates.
Related items
- HighCVE-2026-88968: Claude Code Edit tool symlink race overwrites files outside workspace on macOSSame vendor · NVD/CVE Database
- HighCVE-2026-88066: Claude Desktop on Windows git.exe execution via search pathSame vendor · NVD/CVE Database
- HighCVE-2026-62331: praktor path traversal via Telegram document upload filenamesSame vendor · NVD/CVE Database
- MediumGHSA-w4fh-qvv9-3v23: Model Context Protocol Python SDK: Server bearer-token authentication accepts tokens issued for a different resource serverSame vendor · GitHub Advisory Database
- MediumGHSA-5h93-6whr-6q8j: Model Context Protocol Python SDK: HTTP client transports followed cross-origin redirects carrying custom headers and bodiesSame vendor · GitHub Advisory Database