漏洞信息
尽管我们使用了先进的大模型技术，但其输出仍可能包含不准确或过时的信息。神龙努力确保数据的准确性，但请您根据实际情况进行核实和判断。
Vulnerability Title
Claude SDK for Python: Insecure Default File Permissions in Local Filesystem Memory Tool
Vulnerability Description
The Claude SDK for Python provides access to the Claude API from Python applications. From version 0.86.0 to before version 0.87.0, the local filesystem memory tool in the Anthropic Python SDK created memory files with mode 0o666, leaving them world-readable on systems with a standard umask and world-writable in environments with a permissive umask such as many Docker base images. A local attacker on a shared host could read persisted agent state, and in containerized deployments could modify memory files to influence subsequent model behavior. Both the synchronous and asynchronous memory tool implementations were affected. This issue has been patched in version 0.87.0.
CVSS Information
N/A
Vulnerability Type
缺省权限不正确
Vulnerability Title
Claude SDK for Python 安全漏洞
Vulnerability Description
Claude SDK for Python是Anthropic开源的一个用于调用Claude API的Python软件开发工具包。 Claude SDK for Python 0.87.0之前版本存在安全漏洞，该漏洞源于本地文件系统内存工具创建的文件权限不当，可能导致本地攻击者读取或修改代理状态。
CVSS Information
N/A
Vulnerability Type
N/A