Researchers uncovered a sandbox escape vulnerability in Anthropic’s Claude Cowork, allowing an AI agent to break out of its Linux virtual machine and access files on the host macOS system. This flaw could enable an attacker to read or write files anywhere on the Mac. Affecting approximately 500,000 macOS users, this incident highlights the critical need for robust sandboxing and isolation in AI agent deployments.