CVE-2026-34452

Affected versions of the anthropic package are vulnerable to a Time-of-Check Time-of-Use Race Condition due to the async local filesystem memory tool validating that model-supplied paths resolve inside the sandboxed memory directory, but then returning the unresolved path for subsequent file operations. An attacker with write access to the memory directory could retarget a symlink between the validation and use steps, causing the async memory tool to read or write files outside the intended sandbox. This allows a local attacker to escape the sandbox boundary, potentially accessing or modifying sensitive files on the host filesystem.