PyPI/anthropic CVE-2026-34450: medium, EPSS 0.17%

Claude SDK for Python has Insecure Default File Permissions in Local Filesystem Memory Tool

Action: Upgrade anthropic to 0.87.0 or later.

pip install anthropic==0.87.0

Affected

Fixed versions

Sources

• osv: GHSA-q5f5-3gjm-7mfm
• https://github.com/anthropics/anthropic-sdk-python/security/advisories/GHSA-q5f5-3gjm-7mfm
• https://nvd.nist.gov/vuln/detail/CVE-2026-34450
• https://github.com/anthropics/anthropic-sdk-python/commit/715030ceb4d6dd8d3546e999c680e29532bf1255
• https://github.com/anthropics/anthropic-sdk-python
• https://github.com/anthropics/anthropic-sdk-python/releases/tag/v0.87.0

CVE-2026-34450 · published 2026-04-01T21:15:30Z · modified 2026-09-10T03:51:02.766471330Z · JSON