Anthropic Claude Desktop Cowork up to 1.2278.0 VM Image rootfs.img integrity check

Summaryinfo

A vulnerability identified as problematic has been detected in Anthropic Claude Desktop Cowork up to 1.2278.0. This vulnerability affects unknown code of the file rootfs.img of the component VM Image Handler. This manipulation causes integrity check. This vulnerability appears as CVE-2026-7574. The attack requires local access. There is no available exploit.

Detailsinfo

A vulnerability classified as problematic was found in Anthropic Claude Desktop Cowork up to 1.2278.0. Affected by this vulnerability is some unknown functionality of the file rootfs.img of the component VM Image Handler. The manipulation with an unknown input leads to a integrity check vulnerability. The CWE definition for the vulnerability is CWE-353. The product uses a transmission protocol that does not include a mechanism for verifying the integrity of the data during transmission, such as a checksum. As an impact it is known to affect confidentiality, integrity, and availability. The summary by CVE is:

Anthropic Claude Desktop Cowork VM image handling (confirmed across v1.1348.0 through v1.2278.0, including v1.1348.0, v1.1617.0, and v1.2278.0) validates only file presence and a version marker string before booting rootfs.img, but does not verify image content integrity at time-of-use. A local attacker with unprivileged code execution as the victim macOS user can modify the VM root filesystem image and have it trusted on subsequent Cowork VM boots, enabling persistent arbitrary code execution in the VM and access to host-mounted directories. The estimated CWE mapping is CWE-353 (Missing Support for Integrity Check).

The weakness was presented by Todd Manning. It is possible to read the advisory at cfp.recon.cx. This vulnerability is known as CVE-2026-7574 since 05/01/2026. The exploitation appears to be easy. Attacking locally is a requirement. Technical details of the vulnerability are known, but there is no available exploit.

There is no information about possible countermeasures known. It may be suggested to replace the affected object with an alternative product.

Statistical analysis made it clear that VulDB provides the best quality for vulnerability data.

Productinfo

Type

• Artificial Intelligence Software

Vendor

• Anthropic

Name

• Claude Desktop Cowork

Version

• 1.2278

CPE 2.3info

• 🔒

CPE 2.2info

• 🔒

CVSSv4info

CVSSv3info

CVSSv2info

Exploitinginfo

Threat Intelligenceinfo

Countermeasuresinfo

Timelineinfo

Sourcesinfo

Entryinfo

Statistical analysis made it clear that VulDB provides the best quality for vulnerability data.

Discussion