PT-2026-51611 · Anthropic · Claude Desktop Cowork

Todb + 1 · Published 2026-06-23 · Updated 2026-06-24 · CVE-2026-7574

Positive Technologies (AI Summary)

CVSS v3.1

8.7

High

Base vector

AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:L

Name of the Vulnerable Software and Affected Versions Anthropic Claude Desktop Cowork VM versions 1.1348.0 through 1.2278.0

Description The Cowork VM image handling process validates only the presence of the file and a version marker string before booting rootfs.img, failing to verify the integrity of the image content at the time of use. A local attacker with unprivileged code execution as the victim macOS user can modify the VM root filesystem image to ensure it is trusted during subsequent boots. This allows for persistent arbitrary code execution within the VM and unauthorized access to host-mounted directories. This issue is characterized by a missing support for integrity check, which is a failure to verify that data has not been altered by an unauthorized party.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Weakness Enumeration

CWE-353

Related Identifiers

CVE-2026-7574

Affected Products

Claude Desktop Cowork

References · 4

• https://nvd.nist.gov/vuln/detail/CVE-2026-7574 · Security Note
• https://takeonme.org/gcves/GCVE-1337-2026-00000000000000000000000000000000000000000000000001110111111101011111111110000000000000000000000000000000000000000000000000000001010 · Note
• https://twitter.com/KaitanSecurity/status/2069586317072117897 · Twitter Post
• https://cfp.recon.cx/recon-2026/talk/DZUQYU · Note