CVE-2026-34452
2 advisories.
PyPI/anthropic CVE-2026-34452: medium 5.3, EPSS 0.14%
Claude SDK for Python: Memory Tool Path Validation Race Condition Allows Sandbox Escape
Action: Upgrade anthropic to 0.87.0 or later.
pip install anthropic==0.87.0Affected
| introduced | fixed | last affected |
|---|---|---|
| 0.86.0 | 0.87.0 | - |
Fixed versions
| 0.87.0 |
Sources
- osv: GHSA-w828-4qhx-vxx3
- https://github.com/anthropics/anthropic-sdk-python/security/advisories/GHSA-w828-4qhx-vxx3
- https://nvd.nist.gov/vuln/detail/CVE-2026-34452
- https://github.com/anthropics/anthropic-sdk-python/commit/6599043eee6e86dce16953fcd1fd828052052be6
- https://github.com/anthropics/anthropic-sdk-python
- https://github.com/anthropics/anthropic-sdk-python/releases/tag/v0.87.0
CVE-2026-34452 · published · modified · JSON
PyPI/anthropic CVE-2026-34452: medium 5.3, EPSS 0.14%
The Claude SDK for Python provides access to the Claude API from Python applications. From version 0.86.0 to before version 0.87.0, the async local filesystem memory tool in the Anthropic Python SDK v
Action: Upgrade anthropic to 0.87.0 or later.
pip install anthropic==0.87.0Affected
| introduced | fixed | last affected |
|---|---|---|
| 0.86.0 | 0.87.0 | - |
Fixed versions
| 0.87.0 |
Sources
- osv: PYSEC-2026-2115
- https://github.com/anthropics/anthropic-sdk-python/releases/tag/v0.87.0
- https://github.com/anthropics/anthropic-sdk-python/security/advisories/GHSA-w828-4qhx-vxx3
- https://github.com/anthropics/anthropic-sdk-python/commit/6599043eee6e86dce16953fcd1fd828052052be6
CVE-2026-34452 · published · modified · JSON