Claude Cowork has a hole that lets AI agents slip through

Researchers spotted a flaw in Claude Cowork that could let an AI agent pretend to be a real person. The vulnerability sits in how Cowork validates incoming requests — the gate isn't as tight as it should be.

The fix is already in. If you've updated Cowork, you're good. The hole was real and the patch is real, not a press release dressed up as a fix.

Why this matters for us: Cowork is how a lot of folks talk to Claude without opening a browser — if the door is loose, it's loose for the whole familia using it.