Vulnerability in Claude Document-Processing Tool Allows Code Execution

# Vulnerability in Claude Document-Processing Tool Allows Code Execution

https://gcdradar.vercel.app/incidents/vulnerability-in-claude-document-processing-tool-allows-code · AIR-2026-1842 · live

- Lane: Patch now
- Severity: 3 (Confirmed exploitation): Confirmed vulnerability allowing code execution on user machines via AI agent tool abuse.
- Fix status: Fix status unknown
- First reported: 2026-11-09
- AI role: Attack on AI
- Products: Claude

## Summary

Attackers can exploit a flaw in Claude's document-processing tool by supplying a crafted temporary file. This vulnerability enables the AI assistant to execute arbitrary code on the user's local machine.

## What to do

Avoid opening untrusted documents or files with Claude tools until a patch or mitigation is provided.

## Latest updates

- 2026-11-09: Attackers Crash Claude's 'Office Party' Flaw to Run Malicious Code on Linux (https://darkreading.com/endpoint-security/attackers-claude-office-party-flaw-malicious-code-linux)

## Sources

- 2026-11-09 Dark Reading: Attackers Crash Claude's 'Office Party' Flaw to Run Malicious Code on Linux https://darkreading.com/endpoint-security/attackers-claude-office-party-flaw-malicious-code-linux

Verify against the vendor's advisory before changing production. Data CC BY-SA 4.0, https://gcdradar.vercel.app.