CVE-2026-41686: Claude SDK for TypeScript provides access to the Claude API from server-side TypeScript or JavaScript applications. From…
Claude SDK for TypeScript provides access to the Claude API from server-side TypeScript or JavaScript applications. From version 0.79.0 to before version 0.91.1, the BetaLocalFilesystemMemoryTool in the Anthropic TypeScript SDK created memory files and directories using the Node.js default modes (0o666 for files, 0o777 for directories), leaving them world-readable on systems with a standard umask and world-writable in environments with a permissive umask such as many Docker base images. A local attacker on a shared host could read persisted agent state, and in containerized deployments could modify memory files to influence subsequent model behavior. This issue has been patched in version 0.91.1.
- Published by source
- 2026-05-04
- First seen by Reality Radar
- 2026-10-26
- Last verified
- 2026-10-26
Affected
- Manufacturer
- anthropic
- Products
- claude sdk for typescript
- Versions
- <0.91.1
- CPE
- cpe:2.3:a:anthropic:claude_sdk_for_typescript:*:*:*:*:*:*:*:*
Whether your exact unit is affected depends on the model, serial number and region in the official notice.
What the official notice says
Risk: CVSS 4.8
Is this affecting you?
Add what you own or use and Reality Radar will tell you when official changes match it — with evidence and next steps.
Sources
- NIST National Vulnerability Database Tier A · official published 2026-05-04
Evidence ledger
Every piece of evidence we store is appended to a public hash chain, so later edits are detectable. Anyone can re-verify it.
| Entry | Kind | Observed | Evidence hash | Entry hash |
|---|---|---|---|---|
| #1819 | new | 2026-10-26 | 911597a32142…874712 | ab17188f5f2d…0d4728 |
Chain head: #1913 68d492d71c09…880c23