Anthropic · Claude · ChatGPT · Google · Decrypt
Claude-Built Linux Exploit Targets Bug That Ubuntu Still Hasn't Patched
Compiled by KHAO Editorial — aggregated from 1 source. See llms.txt for citation guidance.
★ Tier-1 Source
Another day, another exploit from ChatGPT or Claude that gives them the chills.
Key facts
- Red Hat released fixes for RHEL 8, 9 and 10 on Sunday, including RHSA-2026:93412
- Ubuntu's tracker shows fixes in progress for 22.04, 24.04, 26.04 and 26.10
- Anthropic's earlier Claude Mythos model helped Mozilla find 271 bugs in Firefox, as in April
- Anthropic described the attack on Oct. 27 in a research post covering five targets: Chrome, Safari, Android, Windows, and Linux
Summary
Anthropic says Claude wrote an attack that gives a stranger full control of a Linux server over the internet, using a bug that has existed since Linux version 4.4. Red Hat released fixes on Sunday, Nov. 1, but Ubuntu still lists every version from 16.04 to 26.10 as vulnerable. The Go Security Team says the best fix is to upgrade to a patched kernel, and warns the bug is not limited to the feature Anthropic's attack used. Anthropic says its AI wrote a working attack that lets a stranger take full control of a Linux server over the internet, no password needed.