CVE-2026-34450

Affected versions of the anthropic package are vulnerable to Incorrect Default Permissions due to the local filesystem memory tool creating memory files with overly permissive mode 0o666. Both the synchronous and asynchronous memory tool implementations wrote persisted agent state files that were world-readable under a standard umask and world-writable in environments with a permissive umask, such as many Docker base images. A local attacker on a shared host could read sensitive persisted agent state, and in containerised deployments could modify memory files to influence subsequent model behaviour.