AI AgentHigh
CVE-2026-34451: Claude SDK for TypeScript provides access to the Claude API from server-side TypeScript or JavaScrip…
- Occurred
- Mar 31, 2026
- Published
- Mar 31, 2026
- Source
- NVD CVE
Summary
Claude SDK for TypeScript provides access to the Claude API from server-side TypeScript or JavaScript applications. From version 0.79.0 to before version 0.81.0, the local filesystem memory tool in the Anthropic TypeScript SDK validated model-supplied paths using a string prefix check that did not append a trailing path separator. A model steered by prompt injection could supply a crafted path that resolved to a sibling directory sharing the memory root's name as a prefix, allowing reads and writes outside the sandboxed memory directory. This issue has been patched in version 0.81.0.
Tags
- CVE
- CVE-2026-34451
- cvss:MEDIUM
- agent-fail:injection-direct
- agent-fail:authorization
- agent-cause:prompt-design
Classification
Category confidence: 95%
Severity confidence: 90%
Rationale: Prompt injection vulnerability in SDK allows unauthorized file system access outside sandboxed memory directory.
Classifier: Qwen/Qwen3.5-35B-A3B-FP8