CVE-2026-34450
MediumCVSS 4.4Exploitation Probability (EPSS)
Low risk2th percentile - higher than 2% of all known CVEs
Summary
In the Claude SDK for Python (versions 0.86.0 to before 0.87.0), the local filesystem memory tool creates memory files with mode 0o666, making them world-readable on systems with standard umask and world-writable in permissive umask environments like many Docker images. A local attacker on a shared host can read agent state, and in containers can modify memory files to influence model behavior.
Risk Assessment
Data leakage of agent state and potential manipulation of model behavior by a local attacker, especially in shared and containerized environments.
Recommendation
Update the Claude SDK to version 0.87.0 or later, which fixes this vulnerability. Use appropriate umask settings in container environments.
Original NVD description (English source)
The Claude SDK for Python provides access to the Claude API from Python applications. From version 0.86.0 to before version 0.87.0, the local filesystem memory tool in the Anthropic Python SDK created memory files with mode 0o666, leaving them world-readable on systems with a standard umask and world-writable in environments with a permissive umask such as many Docker base images. A local attacker on a shared host could read persisted agent state, and in containerized deployments could modify memory files to influence subsequent model behavior. Both the synchronous and asynchronous memory tool implementations were affected. This issue has been patched in version 0.87.0.