PT-2026-29380 · Anthropic · Claude Sdk For Python

Kasthelord · Published 2026-03-31 · Updated 2026-04-01 · CVE-2026-34452

Positive Technologies (AI Summary)

CVSS v4.0

5.8

Medium

Base vector

AV:L/AC:H/AT:N/PR:L/UI:N/VC:H/VI:L/VA:N/SC:N/SI:N/SA:N

Name of the Vulnerable Software and Affected Versions Claude SDK for Python versions 0.86.0 through 0.86.999

Description The Claude SDK for Python, used to access the Claude API, had a flaw in the async local filesystem memory tool between versions 0.86.0 and before 0.87.0. The tool validated file paths within a sandbox, but then used the unvalidated path for file operations. This allowed a local attacker who could write to the memory directory to potentially escape the sandbox by manipulating symlinks between the validation and use stages. The synchronous memory tool was not affected.

Recommendations Update to version 0.87.0 or later.

Exploit

Fix

Link Following

Time Of Check To Time Of Use

Weakness Enumeration

CWE-59

CWE-367

Related Identifiers

CVE-2026-34452

GHSA-W828-4QHX-VXX3

Affected Products

Claude Sdk For Python

References · 9

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/34xxx/CVE-2026-34452.json · Exploit
• https://github.com/anthropics/anthropic-sdk-python/security/advisories/GHSA-w828-4qhx-vxx3 · Vendor Advisory
• https://github.com/anthropics/anthropic-sdk-python/commit/6599043eee6e86dce16953fcd1fd828052052be6 · Patch
• https://osv.dev/vulnerability/GHSA-w828-4qhx-vxx3 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2026-34452 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2026-34452 · Security Note
• https://github.com/anthropics/anthropic-sdk-python · Note
• https://github.com/anthropics/anthropic-sdk-python/releases/tag/v0.87.0 · Note
• https://twitter.com/CVEnew/status/2039372102466154780 · Twitter Post