~ / search / GHSA-5474-4w2j-mq4c

GHSA-5474-4w2j-mq4c

Claude SDK for TypeScript: Memory Tool Path Validation Allows Sandbox Escape to Sibling Directories

Source: GitHub Advisory Database (reviewed) Moderate CVE-2026-34451

Packages

EcosystemPackageAffectedFixed in
npm @anthropic-ai/sdk >= 0.79.0, < 0.81.0 0.81.0

Details

As written in the advisory (Markdown source, shown as plain text).

The local filesystem memory tool in the Anthropic TypeScript SDK validated model-supplied paths using a string prefix check that did not append a trailing path separator. A model steered by prompt injection could supply a crafted path that resolved to a sibling directory sharing the memory root's name as a prefix, allowing reads and writes outside the sandboxed memory directory. Users on the affected versions are advised to update to the latest version. Claude SDK for TypeScript thanks [hackerone.com/nicksim](https://hackerone.com/nicksim) for reporting this issue!

References

External links from the advisory. They lead to third-party sites.