PT-2026-29378 · Anthropic · Claude Sdk For Python

Lucasfutures · Published 2026-03-31 · Updated 2026-04-01 · CVE-2026-34450

Positive Technologies (AI Summary)

CVSS v4.0

4.8

Medium

Base vector

AV:L/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:N/SC:N/SI:N/SA:N

Name of the Vulnerable Software and Affected Versions Claude SDK for Python versions 0.86.0 through 0.86.9

Description The Claude SDK for Python, used to access the Claude API, had an issue in the local filesystem memory tool between versions 0.86.0 and before 0.87.0. Memory files were created with permissions that allowed world-read access on systems with a standard umask, and world-write access in environments with a permissive umask, such as many Docker base images. A local attacker on a shared host could potentially read persisted agent state. In containerized deployments, an attacker could modify memory files, potentially influencing subsequent model behavior. Both synchronous and asynchronous memory tool implementations were affected.

Recommendations Update to version 0.87.0 or later.

Exploit

Fix

Incorrect Permission

Incorrect Default Permissions

Weakness Enumeration

CWE-732

CWE-276

Related Identifiers

CVE-2026-34450

GHSA-Q5F5-3GJM-7MFM

Affected Products

Claude Sdk For Python

References · 9

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/34xxx/CVE-2026-34450.json · Exploit
• https://github.com/anthropics/anthropic-sdk-python/commit/715030ceb4d6dd8d3546e999c680e29532bf1255 · Patch
• https://github.com/anthropics/anthropic-sdk-python/security/advisories/GHSA-q5f5-3gjm-7mfm · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2026-34450 · Security Note
• https://osv.dev/vulnerability/CVE-2026-34450 · Vendor Advisory
• https://osv.dev/vulnerability/GHSA-q5f5-3gjm-7mfm · Vendor Advisory
• https://github.com/anthropics/anthropic-sdk-python · Note
• https://github.com/anthropics/anthropic-sdk-python/releases/tag/v0.87.0 · Note
• https://twitter.com/CVEnew/status/2039372101199532506 · Twitter Post