Threats tagged 'ghsa-p7fg-763f-g4gf'

The Claude SDK for TypeScript contains a vulnerability in its BetaLocalFilesystemMemoryTool where files and directories are created with insecure default permissions. This can lead to local attackers on shared hosts reading sensitive persisted agent state or, in containerized environments, modifying memory files to influence model behavior. The issue affects versions from 0.79.0 up to but not including 0.91.1. A fix is available in version 0.91.1.