漏洞信息
尽管我们使用了先进的大模型技术，但其输出仍可能包含不准确或过时的信息。神龙努力确保数据的准确性，但请您根据实际情况进行核实和判断。
Vulnerability Title
Claude SDK for Python: Memory Tool Path Validation Race Condition Allows Sandbox Escape
Vulnerability Description
The Claude SDK for Python provides access to the Claude API from Python applications. From version 0.86.0 to before version 0.87.0, the async local filesystem memory tool in the Anthropic Python SDK validated that model-supplied paths resolved inside the sandboxed memory directory, but then returned the unresolved path for subsequent file operations. A local attacker able to write to the memory directory could retarget a symlink between validation and use, causing reads or writes to escape the sandbox. The synchronous memory tool implementation was not affected. This issue has been patched in version 0.87.0.
CVSS Information
N/A
Vulnerability Type
在文件访问前对链接解析不恰当(链接跟随)
Vulnerability Title
Claude SDK for Python 安全漏洞
Vulnerability Description
Claude SDK for Python是Anthropic开源的一个用于调用Claude API的Python软件开发工具包。 Claude SDK for Python 0.87.0之前版本存在安全漏洞，该漏洞源于异步本地文件系统内存工具返回未解析的路径，可能导致符号链接攻击，从而脱离沙箱限制。
CVSS Information
N/A
Vulnerability Type
N/A