{
 "id": "AIR-2026-0603",
 "slug": "cve-2026-41686-claude-sdk-typescript-insecure-file-permissio",
 "title": "CVE-2026-41686: Claude SDK TypeScript Insecure File Permissions",
 "summary": "The BetaLocalFilesystemMemoryTool in Anthropic's TypeScript SDK created memory files and directories with insecure default permissions. This allows local attackers to read persisted agent state or influence subsequent model behavior in containerized environments.",
 "type": "attack_on_ai",
 "categories": [
  "infra_vuln"
 ],
 "severity": 2,
 "targets": [
  "Anthropic",
  "framework_or_tooling"
 ],
 "products": [
  "Claude SDK for TypeScript"
 ],
 "incident_date": "2026-04-29",
 "incident_date_precision": "day",
 "first_reported": "2026-04-29",
 "sources": [
  {
   "url": "https://github.com/advisories/GHSA-p7fg-763f-g4gf",
   "publisher": "GitHub Advisory Database",
   "title": "CVE-2026-41686: Claude SDK for TypeScript has Insecure Default File Permissions in Local Filesystem Memory Tool",
   "published_at": "2026-04-29"
  }
 ],
 "source_count": 1,
 "confidence": 0.95,
 "status": "published",
 "origin": "seed_ghsa",
 "tags": [
  "CVE-2026-41686",
  "permissions",
  "sdk"
 ],
 "created_at": "2026-10-18T07:00:14.101Z",
 "updated_at": "2026-10-18T07:00:14.101Z"
}