{
 "id": "AIR-2026-0541",
 "slug": "cve-2026-34450-claude-python-sdk-insecure-file-permissions",
 "title": "CVE-2026-34450: Claude Python SDK Insecure File Permissions",
 "summary": "The Claude SDK for Python created memory files with overly permissive file permissions, allowing local users or containers to read or modify agent state. Users should upgrade to the latest patched version.",
 "type": "attack_on_ai",
 "categories": [
  "infra_vuln"
 ],
 "severity": 2,
 "targets": [
  "Anthropic",
  "framework_or_tooling"
 ],
 "products": [
  "Claude SDK for Python"
 ],
 "incident_date": "2026-04-01",
 "incident_date_precision": "day",
 "first_reported": "2026-04-01",
 "sources": [
  {
   "url": "https://github.com/advisories/GHSA-q5f5-3gjm-7mfm",
   "publisher": "GitHub Advisory Database",
   "title": "CVE-2026-34450: Claude SDK for Python has Insecure Default File Permissions in Local Filesystem Memory Tool",
   "published_at": "2026-04-01"
  }
 ],
 "source_count": 1,
 "confidence": 0.95,
 "status": "published",
 "origin": "seed_ghsa",
 "tags": [
  "CVE-2026-34450",
  "insecure-permissions"
 ],
 "created_at": "2026-10-18T07:00:14.101Z",
 "updated_at": "2026-10-18T07:00:14.101Z"
}