Is CVE-2026-34452 actively exploited?

No active exploitation of CVE-2026-34452 has been confirmed so far. Continue monitoring, as exploit status can change.

Can CVE-2026-34452 be exploited remotely?

No. CVE-2026-34452 requires local access to exploit.

What is the CVSS score of CVE-2026-34452?

CVE-2026-34452 has a CVSS score of 5.8 (MEDIUM).

HOME VULNERABILITIESCVE-2026-34452

MEDIUM

CVE-2026-34452

CWE-59Published: March 31, 2026· Updated: Apr 1, 2026

5.8

CVSS v3.1

EPSS:0.02%probability of exploitation in 30 daysPercentile:3.5th

Official Description

The Claude SDK for Python provides access to the Claude API from Python applications. From version 0.86.0 to before version 0.87.0, the async local filesystem memory tool in the Anthropic Python SDK validated that model-supplied paths resolved inside the sandboxed memory directory, but then returned the unresolved path for subsequent file operations. A local attacker able to write to the memory directory could retarget a symlink between validation and use, causing reads or writes to escape the sandbox. The synchronous memory tool implementation was not affected. This issue has been patched in version 0.87.0.

NVD Source

Technical Analysis

CVE-2026-34452 requires local access, meaning attackers must already have a foothold on the target system.

Exploitation requires low privileges, which limits the exposure to scenarios where an attacker has already gained initial access.

CVSS v3.1 Vector Breakdown

Exploitability

Attack VectorLocal

Attack ComplexityHigh

Privileges Req.Low

User InteractionNone

ScopeX

Impact

Confidentiality

Integrity

Availability

CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:H/VI:L/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X